TFL Vsebine / Revija SIR*IUS

Procedures of the Information Commissioner in the Field of Personal Data Protection

Varstvo osebnih podatkov v Republiki Sloveniji zagotavlja Informacijski pooblaščenec v okviru dveh temeljnih nadzornih postopkov – na zahtevo posameznika, na katerega se osebni podatki nanašajo (postopek na zahtevo prijavitelja s posebnim položajem), in po uradni dolžnosti (inšpekcijski postopek). V prvem postopku Informacijski pooblaščenec ščiti posameznika, ki je vložil zahtevo, v drugem pa odpravlja sistemske kršitve. V prvem postopku se lahko posameznik bodisi pritoži zoper odločitev upravljavca o njegovi pravici (npr. dostopa, izbrisa, popravka, ugovora), ki jo je predhodno uveljavljal pri upravljavcu, bodisi neposredno zahteva nadzor v zvezi s kršitvijo, ki jo zatrjuje. Posameznik v tem postopku lahko pridobi ugotovitev kršitve, ki jo lahko uporabi v morebitnem odškodninskem postopku. Postopek po uradni dolžnosti Informacijski pooblaščenec vodi kot inšpekcijski postopek. V prvem postopku sta stranki posameznik in nadzorovani upravljavec ali obdelovalec, v drugem pa le inšpekcijski zavezanec. Če Informacijski pooblaščenec ugotovi kršitev, po uradni dolžnosti ravna v skladu s pooblastili prekrškovnega organa.

The protection of personal data in the Republic of Slovenia is ensured by the Information Commissioner (hereinafter referred to as the IC) within the framework of two basic supervisory procedures - at the request of the data subject (complaint procedure or ‘procedure at the request of the complainant with special status’) and ex officio (inspection procedure). In the first procedure, the IC protects the individual who made the request, and in the second, he corrects system violations. In the first procedure, an individual can either ‘complain’ against the controller’s decision on his or her right (e.g. access, deletion, rectification, objection) that he or she previously exercised with the controller, or directly request supervision in relation to the breach he or she alleges. An individual in this proceeding may obtain a finding of infringement that can be used in a potential damages claim. The ex officio IP procedure is conducted by the information commissioner as an inspection procedure. In the first procedure, the parties are the individual and the supervised controller or processor, and in the second, only the entity subject to inspection. If the IC finds a violation, he acts ex officio in accordance with the powers of the misdemeanour authority.