Article 35b ( Autoriteit persoonsgegevens duties)

• 1

  The Autoriteit persoonsgegevens Authority is tasked with:

  • a.

    monitoring and enforcing the processing of personal data in accordance with the provisions of or under this Act;

  • b.

    Providing advice on proposals of law and drafts of general measures of administration that wholly or substantially relate to the processing of personal data;

  • c.

    increasing public awareness and understanding of the risks, rules, safeguards and rights associated with the processing of personal data;

  • d.

    making controllers and processors better aware of their obligations under the provisions of or pursuant to this Act;

  • e.

    providing any data subject, upon request, with information on the exercise of his rights under the provisions of or pursuant to this Act and, where appropriate, cooperating to this end with the authorities in other Member States referred to in Article 35d, paragraph 1, which are charged with supervision;

  • f.

    dealing with complaints from data subjects, or bodies, organizations or associations representing the data subject, investigating the content of the complaint and informing the complainant of the progress and outcome of the investigation within a reasonable time, in particular if further investigation or coordination with another supervisory authority is necessary;

  • g.

    checking the lawfulness of processing in response to a complaint referred to in Article 31a, paragraph 1, and informing the data subject within a reasonable time of the result of the check or of the reasons why the check was not carried out;

  • h.

    cooperating with other authorities charged with the supervision referred to in section 35d, subsection 1, in order to ensure consistency in the application and enforcement of the provisions under or pursuant to this Act, including by sharing information and offering mutual assistance;

  • i.

    conducting investigations into compliance with the provisions of or under this Act, including on the basis of information received by the Autoriteit persoonsgegevens Authority from another authority entrusted with the supervision referred to in Section 35(1) or another public authority;

  • j.

    monitoring relevant developments insofar as they affect the protection of personal data, especially the development of information and communication technologies;

  • k.

    providing advice in response to a prior consultation referred to in section 33b(1), and

  • l.

    contributing to the activities of the Committee established by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

• 2

  The Autoriteit persoonsgegevens Authority performs its duties free of charge for the data subject and for the Data Protection Officer.