Manama, December 6 (BNA): The Personal Data Protection Authority has opened consultations for the second time before issuing the final version.
The authority said that it accepts comments and comments on the draft executive orders from all sectors and bodies until December 13.
The authority has received fruitful feedback and comments from individuals and national and international bodies via e-mail and virtual meetings.
This was taken into account when amending the draft executive orders to achieve a balance between the rights of data owners and the ease of implementation of the Personal Data Protection Law and its executive regulations.
The authority explained that the most prominent amendments made to the draft executive orders included a review of the technical and organizational procedures by introducing the principles implemented by data controllers, in line with the nature, scope, context, purpose and gravity of the processing, allowing the appointment of data controllers. Data Guardian if so chosen by the Data Controller.
It can be an internal or external data custodian. An internal trustee can be among the employees of the data controller, and after approval by the authority, an external trustee is licensed according to certain requirements.
However, the authority can oblige certain sectors to appoint a trustee according to the nature of the activity and the size and method of processing.
The amendments also included granting the internal guardian the authority to license as an external guardian at the same time under certain conditions.
They also include the data custodian’s disclosure of any perceived conflict of interest to the data controller to ensure independence and impartiality, where strict provisions are made to protect the confidentiality of any information provided to custodians.
Other clauses cover the introduction of additional methods to allow easy cross-border data transfer through common rules and standard contractual terms; Removing the requirement to have an insurance policy for violating the privacy of data subjects, and submitting a draft new order setting out conditions and safeguards for data processing related to criminal proceedings.
The authority expressed its gratitude to all individuals and entities that contributed to expressing their opinions and observations.
The authority said it is seeking further comments on the recent amendments to the draft executive orders, which are:
● Draft decree regarding the conditions to be met in the technical and organizational procedures that guarantee protection.
● a draft order regarding states, countries and territories with adequate legislative and regulatory protection for personal data;
● a draft order regarding the rights of the data subject;
● a draft order on the conditions to be met during the creation of publicly accessible records;
● a draft order regarding the rules and procedures for the processing of sensitive personal data;
● a draft order on the rules and procedure for submitting notifications and requests for pre-authorization;
● a draft decree on the conditions and guarantees that must be adhered to for the protection of data related to the establishment and follow-up of criminal proceedings and related provisions;
● a draft order regarding the duties of a data protection guard;
● Draft order regarding the rules and procedures governing the submission of complaints regarding the protection of personal data
The authority highlighted the importance of receiving opinions and observations from individuals and various sectors.
It aims to establish regulations that ensure the protection of personal data and combat privacy violations.
The authority confirmed that it welcomes any inquiries or comments via the following e-mail [email protected] of individuals and entities on the draft amended executive orders, which are currently published in both English and Arabic on the authority’s website www.pdp.gov.bh.