No. 136 Chapter 69 Gor
Government Gazette
27 May 2019
data protection officer’s employment by the reason that the data protection officer performs his
or her duties under this Act. In the event that there is any problem when performing the duties,
the data protection officer must be able to directly report to the highest management person of
the Data Controller or the Data Processor.
The data protection officer may be able to perform other duties or tasks but
the Data Controller or the Data Processor must warrant to the Office that such duties or tasks
are not against or contrary to the performance of the duties under this Act.
Chapter IV
Office of the Personal Data Protection Committee
--------------------------Section 43 There shall be an Office of the Personal Data Protection
Committee, whose objectives are to protect Personal Data, encourage and support the
country’s development regarding Personal Data protection.
The Office shall act as a government agency, with the status of a juristic person.
The Office shall not be deemed a public sector under the law on administrative organization
of the state, or a state enterprise under the law on budget procedures or other laws.
The Office’s operation shall not be governed by the laws on labor
protection, labor relations, state enterprise labor relations, social security, and
workmen’s compensation. However, the staff and employees of the Office shall be entitled
to compensation at the rate not less than the rate stipulated by the laws on labor protection,
social security, and workmen’s compensation.
The Office shall be deemed a government agency under the law on tort
liability of government official.
Section 44 In addition to the Office’s duty to carry out its operations to
achieve the objectives as set out in Section 43 paragraph one, the Office shall have the duty to
perform academic and administrative tasks for the Committee, the commission supervising
the Office of Personal Data Protection Committee, the expert committee, and the subcommittee. The Office shall also have the following duties and power:
(1) To draft the master plan on the operation for the promotion and protection
of Personal Data, which are coherent with national policies, national strategies and relevant
national plans, and to draft the master plan and corrective measures regarding the
difficulties in carrying out such national level policies, strategies and plans in order to propose
to the Committee;
(2) To promote and support the research for the development of technology
relating to the protection of Personal Data;
(3) To analyze and verify the compliance with and accuracy of the standards
or measures, or t h e s u p e r v i s i o n m e c h a n i s m in connection with Personal
Data protection, as well as to review and certify the Personal Data protection policy
22
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents