Participation of the AEPD to analyze the situation of data protection delegates
The initiative is launched within the framework of the EDPB to assess the situation of DPOs in their organizations, analyzing the practices of more than 30,000 public and private sector entities
15/03/2023
The Spanish Data Protection Agency (AEPD) participates in a coordinated European action to analyze the designation and situation of data protection delegates (DPD) in public and private entities, within the framework of coordinated actions of the European Committee for the Protection of Data Data (EDPB) expected in 2023 .
The objective of this preventive action is to assess whether the situation of DPOs in their organizations conforms to what is required in the General Data Protection Regulation.
For its part, the AEPD will analyze the practices of more than 30,000 public and private sector entities . With regard to private sector entities, the questionnaire will take into account different sectors of activity: education, banking and financial entities, health, the energy sector, security, telecommunications services, financial solvency and credit, and activities related to gambling. chance and bets The participating authorities will send a questionnaire that includes questions related, among others, to the designation, knowledge and experience of the DPOs, their tasks and resources or their role and position in their respective organizations.
The results of this action will be analyzed in a coordinated manner and the Authorities may decide on possible additional supervision and enforcement actions in their respective countries. In addition, the results will be added, generating a broader vision and allowing a specific follow-up in the field of the European Economic Area o. Finally, the Committee will publish a report on the result of this analysis once the actions have been completed.
Let us remember that there are already more than 100,000 organizations that have a data protection officer registered with the AEPD. Of these, 91,221 correspond to the private sector and 9,129 to the public sector (182 from the General State Administration, 433 from Autonomous Communities, 4,537 from Local Entities and 3,977 from other Legal-Public persons).
It is important to remember that, before this ex officio initiative, the companies that are obliged to have a data protection delegate have designated and notified the AEPD of said designation.
Idaira Hernandez Peraza
consultant
Photo source: Spanish Data Protection Agency