Description

Privacy Protection Authority adopted guidance on transfer of ownership of data repositories

On 22 December 2024, the Privacy Protection Authority (PPA) adopted the guidance on the transfer of ownership of data repositories. The guidance outlines the responsibilities of database owners and the conditions under which ownership transfers may occur. It imposes obligations including ensuring the transfer does not alter the purpose of data usage and requiring data subject consent if the purpose changes. It also requires allowing for a simple notification if there is no change in the purpose of processing. Additionally, if the new owner’s characteristics differ significantly from the original, affecting the data subjects’ rights or expectations, prior consent must be obtained.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2024-12-22
adopted

On 22 December 2024, the Privacy Protection Authority (PPA) adopted the guidance on the transfer of…