3 – The CNPD or its members and the staff delegated thereby have the right of access to
the computer systems supporting the data processing and the documentation referred to
in the previous number, within the scope of its duties and responsibilities.
1 – The CNPD shall be composed of seven members of recognised integrity and merit, the
chairman and two members being elected by the Assembleia de Rep�blica by means of the
d’Hondt highest average rule.
(a) two magistrates with over 10 years’ experience, one being a legal magistrate appointed
by the Conselho Superior da Magistratura, and the other a Public Prosecution Service
magistrate appointed by the Conselho Superior do Minist�rio P�blico;
(b) two individuals of recognised competence appointed by the Government.
3 – The members of the CNPD shall have a five-year mandate which shall cease when the
newly appointed members take office.
4 - The members of the CNPD shall be set down on the list published in the 1st series of
the Di�rio da Rep�blica.
5 – The members of the CNPD shall take office before the President of the Assembleia de
Rep�blica in the 10 days following publication of the list referred to in the previous
number.
(a) the implementing Act and the staff of the CNPD;
(b) the system of conflicts of interest, disqualification, suspension and loss of mandate,
and the remuneration of the members of the CNPD.
2 – The status of the members of the CNPD guarantees their independence in exercising
their functions.
3 – The Commission has its own staff for technical and administrative support, the
respective officials and agents enjoying the status and benefits of the staff of the
Assembleia de Rep�blica.
1 – The controller or his representative, if any, must notify the CNPD before carrying out
any wholly or partly automatic processing operation or set of such operations intended to
serve a single purpose or several related purposes.
2 – The CNPD may authorise the simplification of or exemption from notification for
particular categories of processing which are unlikely, taking account of the data to be
processed, to affect adversely the rights and freedoms of the data subjects and to take
account of criteria of speed, economy and efficiency.
3 – The authorisation, which must be published in the Di�rio da Rep�blica, must specify the
purposes of the processing, the data or category of data to be processed, the category or
categories of data subjects, the recipients or categories of recipients to whom the data may
14/20