Serves under-18s, in Monaco

Loi n. 1.565 du 3 decembre 2024, arts. 2, 6-8, 77 (sensitive data, biometric data and minors) · Read the law's page

• Do not process sensitive data, meaning data revealing political, religious, philosophical, or trade union opinions, racial or ethnic origin, genetic data, biometric data used to identify a person uniquely, or data about health, sex life, or sexual orientation, unless one of the listed exceptions applies.
• Where you rely on a person's explicit consent to process their sensitive data, keep evidence that the consent was specific, informed, and given by a clear positive act, since a law can also bar that prohibition from ever being lifted by consent alone.
• As an employer, use a biometric identifier only where it is strictly necessary to control access to the workplace or to the devices and applications your employees use for their duties, and only for that purpose.
• Where you process personal data of a minor for an information society service on the basis of consent and the minor is under 15, take consent from the minor together with the authorisation of whoever holds parental authority, and make reasonable efforts to verify that the authorisation genuinely came from a parent or guardian.
• As an administrative or judicial authority acting in the exercise of your public powers, do not process genetic or biometric data for authentication or identity control without first obtaining the Authority's opinion, and store the raw biometric data separately from any template derived from it.
• Do not interconnect data from the judicial criminal record with any other file or processing operation.
• Put safeguards in place to prevent discrimination or another risk to a person's rights and freedoms wherever an exception lets you process their sensitive data on a public interest, medical, or archival, research, or statistical ground.