Decision no. 200/2015 establishing the cases of personal data processing in which it is not necessary to submit a notification, as well as on modifying and abolishing other decisions
On the 28th December 2015 Decision no. 200/2015 entered into force and establishes the cases of personal data processing in which it is not necessary to submit a notification, as well as modifying and abolishing other decisions, issued by the president of the National Supervisory Authority for Personal Data Processing and published in the Official Journal no. 969 of 28th December 2015.
This decision was issued based on the provisions of article 22 paragraph (9) of Law no. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of such data, with the subsequent modifications and amendments, according to which the supervisory authority may establish cases in which the notification is not required.
In view of the need for an effective protection of the data subjects’ right, especially in the case of certain processing operations which pose risks to the rights and liberties of natural persons, through this regulation the Supervisory Authority has established the cases in which the data controllers’ obligation to submit notifications is maintained, in view of the nature of the processed data, the processing’s purpose, the categories of data subjects or the mechanisms used to process data.