The two main functions of the DPC (Data Protection Commission) are to safeguard data protection rights and handle complaints related to data protection law.
Detailed Functions of the DPC
The Data Protection Commission (DPC) carries out its mission through two core functions:
-
Safeguarding Data Protection Rights by Driving Compliance: This involves promoting and ensuring adherence to data protection laws through guidance, supervision, and enforcement. This proactive function aims to prevent data breaches and protect individuals' rights before violations occur.
- Guidance: The DPC provides guidelines and resources to help organizations understand and comply with data protection regulations (e.g., GDPR). This includes providing advice on best practices for data processing, data security, and data breach notification.
- Supervision: The DPC monitors organizations' data processing activities to ensure they are complying with data protection laws. This may involve conducting audits, investigations, and assessments.
- Enforcement: The DPC has the power to enforce data protection laws, including issuing fines, orders, and other sanctions against organizations that violate the law.
-
Handling Complaints: The DPC deals with complaints from individuals who believe their personal data has been processed in a way that violates data protection law. This reactive function allows individuals to seek redress when their data rights are violated.
- Investigation of Complaints: The DPC investigates complaints from individuals to determine whether a violation of data protection law has occurred.
- Resolution of Complaints: The DPC attempts to resolve complaints through various means, such as mediation, negotiation, and adjudication.
- Providing Redress: If the DPC finds that a violation has occurred, it may order the organization to take corrective action, such as deleting the data, providing compensation to the individual, or changing its data processing practices.
In summary, the DPC both proactively promotes data protection compliance and reactively addresses violations of data protection law through complaint resolution.
