Source: https://www.gdprwatchdog.com/dpa/
Timestamp: 2019-02-18 06:15:56
Document Index: 350931779

Matched Legal Cases: ['Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29', 'Art 29']

DPA RATING™ - Who to trust? Data Protection Authorities in Europe
Home DPA RATING ™
DPA RATING™ – Who to trust? Readiness Reality Check 2018
GDPR Watchdog wonder if we can trust DPA’s to protect their citisens under the new General Data Protection Regulation and be on top of the GDPR? We know from experience that there are big internal differences inside Europe, not only in regards to culture and corruption but also to level of readiness to follow the law and prosecute those who don’t. We have also seen very little official campaigns to educate the data subjects about their new rights. The only country truly active in this for the time being is UK.
GDPR Watchdog has therefore sent a list of important questions to the DPA – Data Protection Authority in each of the European countries in order to evaluate them!
Our rating is from 1 to 5 stars * depending on how they are working and planning to audit, prosecute and collect the fines against companies which are violating the new General Data Protection Regulation laws. 1-3 Stars for public education, audit and execution plans, 1 star for answering within 15 days, 1 star for the list of DPA accredited GDPR certifying companies.
Here is the list of questions sent to DPA’s in order to rate them:
Data breaches must be reported within 72 hours to the DPA and DPO must be reported within 15 days. We use same time frame for answering the questions, so 3 days is excellent and 15 days is the maximum time frame set to answer our questions, answering the 10 questions within 15 day alone counts for 1 star as it shows better than average public office engagement towards citizens and companies. As you know, then the response time is one of the most important factors in connection with GDPR.
We have also sent questions to Mr. Giovanni Buttarelli the European Data Protection Supervisor(EDPS) in Brussels and asked for a meeting with the legal council who advised and consulted WP29 during the process of preparing and implementing the new General Data Protection Regulation into law.
Our questions to the supervisor, WP29 and their legal council are:
Why is EUR 20 million the number and not EUR 100 million?
National Data Protection Authorities:
THIS IS A PROVISIONAL RATING – FINAL RATING JUNE 2018
Austria – DPA RATING ***
Belgium – DPA RATING ***
Bulgaria – DPA RATING ***
Art 29 WP Member: Mr Ventsislav KARADJOV, Chairman of the Commission for Personal
Croatia – DPA RATING ***
Art 29 WP Member: Mr Anto RAJKOVAČA, Director of the Croatian Data Protection
Cyprus – DPA RATING ***
Czech Republic – DPA RATING ***
Denmark – DPA RATING ***
Art 29 WP Member: Ms Cristina Angela GULISANO, Director, Danish Data Protection
Agency (Datatilsynet)
Art 29 WP Alternate Member: Mr Peter FOGH KNUDSEN, Head of International Division at
Estonia – DPA RATING ***
Art 29 WP Member: Mr Viljar PEEP, Director General, Estonian Data Protection
Art 29 WP Alternate Member: Ms Maarja Kirss
Finland – DPA RATING ***
Art 29 WP Member: Mr Reijo AARNIO, Ombudsman of the Finnish Data Protection
France – DPA RATING ***
Germany – DPA RATING ***
The competence for complaints is split among different data protection supervisory
authorities in Germany. Competent authorities can be identified according to the list provided under https://www.datenschutz-wiki.de
Art 29 WP Member: Ms Andrea VOSSHOFF, Federal Commissioner for Freedom of
Art 29 WP Alternate Member: Prof. Dr. Johannes CASPAR, representative of the federal
Greece – DPA RATING ***
Art 29 WP Member: Mr Konstantinos Menoudakos, President of the Hellenic Data
Hungary – DPA RATING ***
Art 29 WP Member: Dr Attila PÉTERFALVI, President of the National Authority for Data
Art 29 WP Alternate Member: Mr Endre Győző SZABÓ Vice-president of the National
Authority for Data Protection and Freedom of Information
Ireland – DPA RATING ***
Art 29 WP Alternate Members: Mr John O’DWYER, Deputy Commissioner; Mr Dale
SUNDERLAND, Deputy Commissioner
Italy – DPA RATING ***
Art 29 WP Member: Mr Antonello SORO, President of Garante per la protezione dei dati
Art 29 WP Alternate Member: Ms Giuseppe BUSIA, Secretary General of Garante per la
Latvia – DPA RATING ***
Lithuania – DPA RATING ***
Art 29 WP Member: Mr Algirdas KUNČINAS, Director of the State Data Protection
Art 29 WP Alternate Member: Ms Neringa KAKTAVIČIŪTĖ-MICKIENĖ, Head of
Complaints Investigation and International Cooperation Division
Luxembourg – DPA RATING ***
Art 29 WP Member: Mr Christophe BUSCHMANN, President of the Commission Nationale
pour la Protection des Données and deputy member for Luxemburg in the Art 29 WP and
member of the Technologies Subgroup
Malta – DPA RATING ***
Art 29 WP Alternate Member: Mr Ian DEGUARA, Director – Operations and Programme
Netherlands – DPA RATING ***
Poland – DPA RATING ***
Art 29 WP Member: Ms Edyta BIELAK-JOMAA, Inspector General for the Protection of
Portugal – DPA RATING ***
Art 29 WP Member: Ms Filipa CALVÃO, President, Comissão Nacional de Protecção de
Art 29 WP Alternate Member: Isabel CRUZ, Secretary-General of the DPA
Romania – DPA RATING ***
Art 29 WP Member: Ms Ancuţa Gianina OPRE, President of the National Supervisory
Art 29 WP Alternate Member: Ms Alina SAVOIU, Head of the Legal and Communication
Slovakia – DPA RATING ***
Art 29 WP Member: Ms Soňa PŐTHEOVÁ, President of the Office for Personal Data
Protection of the Slovak Republic
Art 29 WP Alternate Member: Mr Anna VITTEKOVA, Vice President
Slovenia – DPA RATING ***
Art 29 WP Member: Ms Mojca PRELESNIK, Information Commissioner of the Republic of
Spain – DPA RATING ***
Art 29 WP Member: Ms María del Mar España Martí, Director of the Spanish Data
Sweden – DPA RATING ***
Art 29 WP Member: Ms Kristina SVAHN STARRSJÖ, Director General of the Data
United Kingdom – DPA RATING ***
Iceland – DPA RATING ***
Liechtenstein – DPA RATING ***
Norway – DPA RATING ***
Data Protection Authority: Mr Bjørn Erik THORN
Switzerland – DPA RATING ***
Tel. +41 31 322 4395; Fax +41 31 325 9996
* Please note the ratings is not final, we have by default given 3 Stars to each of them, when the questions have been answered, we will do the final rating between 1-5 Stars depending on how serious each DPA is handling GDPR!
The final rating will be released in an international press released in June 2018