The Personal Data Protection Office has presented the plan of its controls for this year. The supervisory authority has selected three groups of personal data controllers:
-
Authorities processing personal data in the Schengen Information System (SIS) and Visa Information System (VIS) – checks on data processing in the National Information System or directly in the second generation Schengen Information System and VIS.
-
Entities processing data via mobile applications – the PDPO intends to verify the security of data processed in applications installed on our smartphones or tablets.
-
Banks – checks on profiling and data processing in the framework of credit assessment.
The plan does not exclude the possibility of inspection of entities not belonging to the categories indicated in it, the Personal Data Protection Office is not bound by it. Inspections of the PDPO at controllers or processors operating in other industries may be initiated by peronal data breaches.