All individuals are entitled to know if any personal data concerning them is being processed and what that processing consists of. This right to information is fundamental as it conditions the exercise of other rights such as, for example, the right of access or the right of opposition.
In addition to laying down the right to be informed directly by the data controller, the law also requires the National Commission to maintain a public register of data processing. It is possible for individuals to check in this register whether a particular body may be holding personal data about them and if the body has declared that processing to the National Commission.
The register contains the following information:
- processing notified to the National Commission under Article 12(1) of the amended Act of 2 August 2002;
- processing authorised by the National Commission under Article 14(2) of the amended Act of 2 August 2002;
- processing supervised by a data protection officer and referred to the National Commission under Article 12(2)(a) of the amended Act of 2 August 2002.
NB: Data processings exempted from declaration or not authorized by the National Commission cannot be found in the public register.