Is a listed company, in Cabo Verde

Lei n.º 133/V/2001, de 22 de Janeiro, as republished by Lei n.º 121/IX/2021, de 17 de Março, arts. 37, 45-47, 49-50, 59, 61-63 and 69 (recursos, contraordenações e crimes) · Read the law's page

• Expect data protection supervision to follow up, evaluate and control the activity of the organs and services legally competent to process personal data, in compliance with the Constitution and this law.
• Expect the CNPD to help draft codes of conduct and to declare whether a draft submitted by a professional association or representative organization complies with the data protection laws and regulations in force.
• Expect any person to be able to seek judicial recourse for a violation of the rights this law guarantees, in addition to filing a complaint with the CNPD.
• Expect to be held liable to compensate a person for damage caused by unlawful processing or another act that breaches data protection legislation or regulation, unless you prove that the fact that caused the damage is not attributable to you.
• Expect an administrative fine of CVE 50,000 to 500,000 for an individual or CVE 300,000 to 3,000,000 for a legal person or entity without legal personality for negligently omitting or falsifying the Article 39 notification, doubled for data subject to Article 40 prior authorization, or a fine of CVE 100,000 to 1,000,000, doubled for failing the obligations in Articles 7, 8, 11, 12, 35 or 36, for another listed omission.
• Expect criminal liability of up to one year's imprisonment or a fine of up to 120 days, doubled for Article 8 or 11 data, for intentionally omitting a required CNPD notification or authorization request, giving false information in one, diverting or using data incompatibly with the purpose of collection, or carrying out an illegal data interconnection.
• Do not erase, destroy, damage, suppress or modify personal data without authorization so as to make it unusable or impair its usability, on pain of up to two years' imprisonment or a fine of up to 240 days, doubled for particularly serious damage.
• Interrupt, cease or block processing once notified to do so, cooperate with a CNPD request, and erase or destroy personal data once notified or once its retention period under Article 6 has elapsed, on pain of the penalty for qualified disobedience.
• Keep personal data confidential once bound by professional secrecy, on pain of imprisonment from six months to three years or a fine of eighty to two hundred days, increased by half for a civil servant, a financial gain motive, or endangering another person's reputation, honor or private life.
• Expect a temporary or permanent processing ban, an order to block, erase or destroy data, publication of the conviction at your expense in a widely circulated periodical, or a public warning or censure to be ordered alongside a fine or penalty.

Lei n.º 133/V/2001, de 22 de Janeiro, art. 38 as republished by Lei n.º 121/IX/2021, de 17 de Março (natureza da fiscalização) · Read the law's page

• Submit to supervision by the CNPD, the independent administrative authority that oversees personal data protection under this law and operates within the National Assembly.

Lei n.º 133/V/2001, de 22 de Janeiro, arts. 60 and 64 to 67 as republished by Lei n.º 121/IX/2021, de 17 de Março (acesso indevido e crimes contra os dados pessoais) · Read the law's page

• Do not access personal data barred to you without due authorization or justification, on pain of up to one year's imprisonment or a fine of up to 120 days, doubled where achieved by defeating security rules, where it let you or a third party learn personal data, or for a benefit.
• Do not copy, transfer or assign personal data without legal provision or consent, use it incompatibly with the purpose of collection, promote an illegal interconnection of data, or insert false personal data to obtain an undue advantage or cause harm, on pain of up to one or two years' imprisonment or a fine of up to 120 or 240 days.