Guest user Created: May 25, 2018 Last commented: May 25, 2018

Supervisory Authority

If we are working as Data Controller (for example we sell our software directly to clients via Microsoft Store or App Store) in case of Data Breach (according to your document "9.1_Data_Breach_Response_and_Notification_Procedure_EN.docx" section "Personal data breach notification: Data controller to supervisory authority") - The Company must establish whether the personal data breach should be reported to the Supervisory Authority.

0 0

Assign topic to the user

Select user

Expert

Andrei Hanganu May 25, 2018

Could you explain in detail how we can contact to the Supervisory Authority:
1. Where I can find contacts like email, address, phone number etc. for Supervisory Authority
2. Should we contact to the Supervisory Authority in a specific country? What does it depend on?

Answers:

1. Here is a link to a EU commission's page containing the contact details of Supervisory Authorities in EU countries - https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080 />
2. If you are the controller under the EU GDPR you need to appoint a representative. That representative must be based in a Member State in wh ich the relevant individuals are based if you can`t determine where most of your EU customers are you can choose any EU Members State. So, in a case of a breach you need to notify the Supervisory Authority in the country where you have appointed a representative.

To learn more about data breaches check out our article “5 steps to handle a data breach according to GDPR” https://advisera.com/eugdpracademy/knowledgebase/5-steps-to-handle-a-data-breach-according-to-gdpr/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

May 25, 2018

Expert Advice Community