New information obligations introduced by General Data Protection Regulation 2016/679

The following note referring to information obligations of a data controller, begins a series of practical articles on changes introduced by EU regulation 2016/679 of 27 April 2016.
Specific information obligations have been provided for in the Articles 13-14. According to the new regulation, data controller is required to provide the data subject with the following information:
- the identity and the contact details of the controller and, where applicable, of the controller's representative;
- the contact details of the data protection officer, where applicable;

- the purposes of the processing for which the personal data are intended;
- the legal basis for the processing.
Where personal data are collected from the data subject, the controller is required to provide, inter alia, the following information:
- the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;
- the right to request access to, rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability;

- the right to withdraw consent at any time;
- the right to lodge a complaint with a supervisory authority.
Moreover, where personal data have not been obtained from the data subject, the information obligations include: indication of the legitimate interests pursued by the controller, where the processing is based on that principle, information from which source the personal data originate, and if applicable, whether it came from publicly accessible sources.

The controller should provide any information in a concise, transparent, intelligible and easily accessible form, using clear and plain language.
Further information on changes in the area of collection and processing of personal data will appear soon.
Full content of the regulation is available under the link:
http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=PL