No. 136 Chapter 69 Gor Government Gazette 27 May 2019 data protection officer’s employment by the reason that the data protection officer performs his or her duties under this Act. In the event that there is any problem when performing the duties, the data protection officer must be able to directly report to the highest management person of the Data Controller or the Data Processor. The data protection officer may be able to perform other duties or tasks but the Data Controller or the Data Processor must warrant to the Office that such duties or tasks are not against or contrary to the performance of the duties under this Act. Chapter IV Office of the Personal Data Protection Committee --------------------------Section 43 There shall be an Office of the Personal Data Protection Committee, whose objectives are to protect Personal Data, encourage and support the country’s development regarding Personal Data protection. The Office shall act as a government agency, with the status of a juristic person. The Office shall not be deemed a public sector under the law on administrative organization of the state, or a state enterprise under the law on budget procedures or other laws. The Office’s operation shall not be governed by the laws on labor protection, labor relations, state enterprise labor relations, social security, and workmen’s compensation. However, the staff and employees of the Office shall be entitled to compensation at the rate not less than the rate stipulated by the laws on labor protection, social security, and workmen’s compensation. The Office shall be deemed a government agency under the law on tort liability of government official. Section 44 In addition to the Office’s duty to carry out its operations to achieve the objectives as set out in Section 43 paragraph one, the Office shall have the duty to perform academic and administrative tasks for the Committee, the commission supervising the Office of Personal Data Protection Committee, the expert committee, and the subcommittee. The Office shall also have the following duties and power: (1) To draft the master plan on the operation for the promotion and protection of Personal Data, which are coherent with national policies, national strategies and relevant national plans, and to draft the master plan and corrective measures regarding the difficulties in carrying out such national level policies, strategies and plans in order to propose to the Committee; (2) To promote and support the research for the development of technology relating to the protection of Personal Data; (3) To analyze and verify the compliance with and accuracy of the standards or measures, or t h e s u p e r v i s i o n m e c h a n i s m in connection with Personal Data protection, as well as to review and certify the Personal Data protection policy 22

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents