Salta al contenuto

DIRITTI E PREVENZIONE > COME TUTELARE LA TUA PRIVACY

ricerca avanzata

Authorisation to Transfer Personal Data from the Italian Territory to the Eastern Republic of Uruguay – 14 March 2013 [2614968]

SCHEDA
Garante per la protezione dei dati personali
Doc-Web:
2614968
Data:
14/03/13
Argomenti:
Trasferimento dati all'estero
Tipologia:
Autorizzazione trasferimento dati estero

versione italiana

[doc. web n. 2614968]

Authorisation to Transfer Personal Data from the Italian Territory to the Eastern Republic of Uruguay – 14 March 2013
(published in Italy's Official Journal no.  78  of  3 April 2013)

THE GARANTE PER LA PROTEZIONE DEI DATI PERSONALI

Mr. Antonello Soro, President, Ms. Augusta Iannini, Vice-President, Ms. Giovanna Bianchi Clerici, Member, and Mr. Giuseppe Busia, Secretary General, having convened today;

Having regard to Article 25(1) and (2) of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995, providing that personal data may be transferred to a country outside the European Union if the third country in question ensures an adequate level of protection pursuant to paragraph (2) thereof;

Having regard to Article 25(6) of the said Directive, providing that the European Commission may find that a third country ensures an adequate level of protection within the meaning of paragraph (2) above for the protection of the private lives and the rights and fundamental freedoms of individuals;

Having regard to the European Commission's Decision no. 2012/484/EU of 21 August 2012 as published in the Official Journal of the EU L 227/11 of 23 August 2012, in which it is found that the Eastern Republic of Uruguay can afford an adequate protection level to the personal data transferred from the European Union;

Having regard to, in particular, Recital (12) and the reference made therein to the explanations provided by the Uruguayan authorities competent for data protection as to how the  law in the Eastern Republic of Uruguay is to be interpreted and the assurances given by the said authorities that data protection legislation is implemented in accordance with the said interpretation, which relates in particular to the application of the legislation at issue also to the special laws that create and regulate specific databases as regards issues that are not governed by the said special laws (see Recitals (8) and (11) );

Whereas Member States are required to take the necessary measures to comply with the Commission's Decision in pursuance of the said Article 25(6) of the directive;

Having regard to Section 44(1)b. of the Personal Data Protection Code (legislative decree no. 196/2003), whereby the transfer of personal data to third countries may take place if it is authorised by the Garante on the basis of adequate safeguards for the data subject's rights, which may be set forth in the decisions adopted by the EU Commission pursuant to Article 25(6) and Article 26(4) of Directive 95/46/EC;

Whereas it is necessary to take the measures required to implement the Commission's Decision in accordance with the aforementioned Section 44(1)b.;

Whereas the data protection legislation in force in the Eastern Republic of Uruguay provides for safeguards applying to data subjects' rights that, based on the assessment carried out by the European Commission, are to be considered adequate under Community law in the light of the said Section 44(1)b.;

Having regard to Article 2 in the Commission's Decision concerning controls and measures by Member States' data protection authorities on lawfulness and fairness of data transfers, partly in the light of the provisions made in Article 4 of Directive 95/46/EC on the national law applicable;

Whereas it is necessary to publicise the aforementioned Decision further by having it published in the Official Journal of the Italian Republic as an Annex to this authorisation;

Having regard to official records;

Having regard to the considerations made by the Office as submitted by the Secretary General in pursuance of Article 15 of the Garante's Rules of Procedure no. 1/2000;

Acting on the report submitted by Ms. Augusta Iannini;

BASED ON THE ABOVE PREMISES:

1) Authorises the transfer of personal data from the State's territory to the Eastern Republic of Uruguay as from the date set forth in Article 5 of the European Commission's decision no. 2012/484/EU of 21 August 2012 and in compliance with the terms set forth therein, subject to application of the additional measures set forth in the Personal Data Protection Code;

2) Reserves the right to perform the necessary controls on lawfulness and fairness of data transfers and issue provisions  blocking or  prohibiting the transfer(s), as the case may be, in pursuance of Community law, the Personal Data Protection Code, and Article 2 of the Commission's Decision;

3) Orders that this authorisation and the Commission's Decision annexed hereto be sent to the Ufficio Pubblicazioni Leggi e Decreti of the Ministry of Justice for them to be published in the Official Journal of the Italian Republic.

Done in Rome, this 14th day of the month of March 2013

THE PRESIDENT
Soro

THE RAPPORTEUR
Iannini

THE SECRETARY GENERAL
Busia