LGP North Macedonia / News / Obligations on the Personal Data Protection Law

Obligations on the Personal Data Protection Law

Obligations on the Personal Data Protection Law

Action plan and privacy policy are one of the main obligations arising from the Law on Personal Data Protection that need to be prepared. 

All activities, measures and dynamics for achieving adequate compliance of companies with the provisions of the Law on Personal Data Protection are contained in the Action Plan. The action plan as an act is approved by the manager of the company or another decision-making body in the company. The assessment made by the competent authorities in the company about the impact of the processing operations on the protection of personal data is the basis for the preparation of the action plan. The realization of the foreseen activities and measures is monitored by the person responsible for the realization and that is the management of the company. After the realization of the foreseen activities and measures from the Action Plan, the responsible persons are obliged to continuously monitor and check the implementation of the personal data protection system, as well as to coordinate the activities and actions between the employees and the management in order to maintain the system. Key role in the employee and management coordination, communication between staff and management, their training, and monitoring and verification of the compliance of the system has the Personal Data Protection Officer.

On the other hand, the Privacy Policy contains the answers to the following questions: 

  • why personal data is processed;
  • what personal data is being processed;
  • for what purpose is the processing of personal data performed;
  • what rights the personal data subjects have and how they can achieve them;

The Privacy and Personal Data Protection Policy promotes the obligation of companies to prove their compliance with the Law on Personal Data Protection.