On 22 December 2024, the Privacy Protection Authority (PPA) adopted the guidance on the transfer of ownership of data repositories. The guidance outlines the responsibilities of database owners and the conditions under which ownership transfers may occur. It imposes obligations including ensuring the transfer does not alter the purpose of data usage and requiring data subject consent if the purpose changes. It also requires allowing for a simple notification if there is no change in the purpose of processing. Additionally, if the new owner’s characteristics differ significantly from the original, affecting the data subjects’ rights or expectations, prior consent must be obtained.
Original source