Studio Mazzolari - Privacy Consulting - MILAN

versione italiana

indirizzo

"We make information smarter"

July 2008

Wind of simplification about data protection in the DL. 112/2008 (the c.d. "Summer decree").

Self-certification instead of Security Policy Documents (SPD - DPS): for all Data Controllers who, for current administrative and accounting procedures, process only non-sensitive personal data and the only sensitive data processed allows only the disclosure of employees health conditions without disclosing the relative diagnosis (Art. 29 DL. 112/08), the drawing up of SPD- DPS is replaced by a self-certification, made by the Data controller, the content of which may be limited to the assertion that:

a) the personal data processing regards only non-sensitive data;
b) the only sensitive personal data regards employees health without indicating the relative diagnosis:
c) the latter personal data is processed accordingly to all minimum security measures required by All. B - D.Lgs. 196/2003.

Considering the revolutionary scope of this rule, we reserve to bring you up to date promptly about the next foreseeable clarifications.

Home - Training & Consulting - News - Contacts - Up