TFL Vsebine / Revija Javna uprava

V tem prispevku je obravnavano vprašanje temeljnih ustavnih okvirjev izvrševanja upravnih postopkov glede pridobivanja osebnih podatkov ter potrebnega sodnega varstva v primeru kršitev pravice do varstva osebnih podatkov. Med procesnimi zakoni, ki jih najpogosteje uporabljajo upravni organi, je na prvem mestu Zakon o splošnem upravnem postopku (ZUP), katerega določbe pa je treba razlagati in uporabiti ne le v skladu z Ustavo Republike Slovenije, temveč tudi z Listino Evropske unije o temeljnih pravicah in Splošno uredbo o varstvu podatkov. Določbe Splošne uredbe so za upravne organe kot upravljavce tudi neposredne zavezujoče v celoti, saj zakon, ki bi v skladu s Splošno uredbo po njenem sprejetju uporabil možnosti uveljavitve posebnosti ureditve v Republiki Sloveniji, do objave tega prispevka ni bil sprejet. Avtorja tudi ugotavljata, da pravna sredstva, ki so sicer na voljo za izpodbijanje upravnih aktov, niso vselej niti ustrezna niti dovolj učinkovita za varstvo ustavne pravice do varstva osebnih podatkov, zato je nujno poiskati tiste rešitve, ki posameznikom zagotavljajo učinkovito (sodno) varstvo te pravice. Rešitev je mogoče prepoznati v Splošni uredbi, ki ureja pravico do učinkovitega sodnega varstva zoper upravljavca ali obdelovalca, ki jo lahko poleg drugih pravnih sredstev vloži vsak posameznik, kadar meni, da so bile njegove pravice iz te uredbe kršene zaradi obdelave njegovih osebnih podatkov, ki ni bila v skladu s to uredbo.

The article discusses the issue of the basic constitutional framework of administrative procedures regarding the acquisition of personal data and the necessary judicial protection against possible violations of the right to the protection of personal data. Slovenian General Administrative Procedure Act is most commonly used procedural law by administrative bodies. Its provisions must be interpreted and applied in accordance not only with the Constitution of Republic of Slovenia, but also with the Charter of Fundamental Rights of the European Union and the General Data Protection Regulation (GDPR). Provisions of the GDPR are also directly binding for administrative bodies as controllers without any limitations or exemptions, since the act that would in accordance with the GDPR regulate the specific aspects of its implementation in Slovenia has not been adopted yet. Regarding the protection of the constitutional right to the protection of personal data, the authors also find that the legal remedies – that are available to challenge administrative acts – are not always either adequate or sufficient for the effective protection of personal data, which makes it necessary to find the required solutions that guarantee individuals effective (judicial) protection of this right. One solution can be identified in the GDPR itself, which regulates the right to an effective judicial remedy where a person considers that his or her rights under this Regulation have been infringed because of the processing of his or her personal data in non-compliance with the GDPR.

Constitutional Right of Protection of Personal Data in the Administrative Procedure and Administrative Dispute – Emphases of Theory and Case-law