Page 35
Section VI: Obligations of the personal data processing official
Chapter 1: Confidentiality obligations
Article II – 47:
Processing of personal data shall be confidential. Such processing shall be undertaken
exclusively by persons operating under the authority of a data processing official and
exclusively on the latter’s instruction.
Chapter 2: Security obligations
Article II – 48:
The processing official shall take all such precautions as are necessary depending on
the nature of the data, and in particular, prevent such data from being distorted or
damaged or from being accessed by unauthorized third parties.
Chapter 3: Conservation obligations
Article II – 49:
Personal data shall be conserved for a period set by a regulatory text and solely for the
purposes for which they were obtained.
Chapter 4: Sustainability obligations
Article II – 50:
The processing official shall take all appropriate measures to ensure that processed
personal data can be utilized regardless of the technical device employed in the
process.
The processing official shall, in particular, ensure that technological changes do not
constitute an obstacle to the said utilization.
AU Draft0 010111