|
PROTECTION OF PERSONAL DATATHE RULES OF THE LAW The law n. 675/1996 was introduced and to implement directive 46/95/EC of the European Parliament and of the Council concerning the protection of personal data, as well as the free movement of such data. It entered into force in May 1997. Over time, this provision has been joined by various other laws, concerning individual specific aspects of data processing. The complexity of the regulatory situation which arose following the enactment of supplementary regulations made it essential to provide for the enactment of a Consolidated Law, Legislative Decree 30 June 2003, n. 196, which rearranged the legislation, repealing Law no. 675/1996. The legislation in force must therefore be deduced from Legislative Decree no. 196/2003 entitled "Code regarding the protection of personal data" which entered into force on 1 January 2004. NB: Since many provisions of the new Code on the protection of personal data are identical to those contained in Law 675/1996 previously in force, in the following text there may be citations to the provisions according to the numbering of Law 675. For reasons of continuity with the legislation in force until 2004, unless otherwise indicated, reference is made to law no. 675 of 31 December 1996.Finalità Le finalità del d. lgs. 196/03 consistono nel riconoscimento del diritto del singolo sui propri dati personali e, conseguentemente, nella disciplina delle diverse operazioni di gestione (tecnicamente "trattamento") dei dati, riguardanti la raccolta, l'elaborazione, il raffronto, la cancellazione, la modificazione, la comunicazione o la diffusione degli stessi. Il diritto assoluto di ciascuno sui propri dati è esplicitamente riconosciuto dall'art. 1 del testo unico, in cui si afferma: "Chiunque ha diritto alla protezione dei dati personali che lo riguardano". Tale diritto appartiene alla categoria dei diritti della personalità. Il diritto sui propri dati è differente dal diritto alla riservatezza, in quanto non riguarda solamente informazioni inerenti alla propria vita privata, ma si estende in generale a qualunque informazione relativa ad una persona, anche se non coperta da riserbo (sono dati personali ad esempio il nome o l'indirizzo della propria abitazione). Lo scopo della legge non è quello di impedire il trattamento dei dati, ma di evitare che questo avvenga contro la volontà dell'avente diritto, ovvero secondo modalità pregiudizievoli. Infatti il testo unico definisce i diritti degli interessati, la modalità di raccolta e i requisiti dei dati, gli obblighi di chi raccoglie, detiene o tratta dati personali e le responsabilità e sanzioni in caso di danni. The new code does not change the overall regulation of protection of personal data, since the purpose of this new law is to rationalize the set of existing rules through the instrument of the consolidated text. Il nuovo codice non muta la disciplina complessiva della protezione dei dati personali, in quanto la finalità di questo nuovo testo di legge è quella di razionalizzare il complesso di norme esistenti attraverso lo strumento del testo unico. UNIQUE TEXT ON PRIVACY It consists of three parts, which contain, respectively: I) the general provisions (articles 1-45) concerning the "substantial" rules of the regulation of the processing of personal data, applicable to all processing, except for any specific rules for processing carried out by public or private entities (art. 6); II) particular provisions for specific treatments (arts. 46-140) to supplement or exception to the general provisions of part I; III) the provisions relating to actions for the protection of the interested party and to the sanctioning system (articles 141-186).. RIGHTS RECOGNIZED BY LAW The person to whom the data refers has the right to access information concerning him from other inmates. This right is recognized by the art. 7 of Legislative Decree lgs. 196/03 and includes the right to know: which data are processed, how and for what purposes the treatment takes place, the author of the treatment, the subjects to whom said data may be communicated. By reason of the right of access the interested party he can then ask that the data from other prisoners correspond to the truth, requesting their updating or cancellation depending on the case. If the data is then processed in a way that does not comply with the law, the interested party can request the cancellation of the same or the blocking of the processing. Protection of rights Anyone who is harmed in the rights on their data recognized by the d. lgs. 196/03 (data collection without consent, consent acquired without providing prior legal information, data processing beyond the limits of the consent given, denial or limitation of the right of access) can appeal to the Guarantor for the protection of personal data ( with a rather rapid procedure and contained costs) or to the civil judge (with greater costs and times). If, on the other hand, as a result of the processing of data not in compliance with the law, damage has been suffered (not necessarily economic, therefore also consisting of the inconvenience caused by the fact) compensation can only be granted by the civil judge. |