Vatican CityGeneral Regulation on the Protection of Personal Data, reporting of personal data violations
In force since .
A breach notification rule binding government bodies.
- Obligation class
- Breach notice, Reporting
- Audit expectation
- none
What it requires
- Where this Regulation binds your processing, have each Referente communicate any violation of the Security Measures and the resulting violation of Personal data to the person responsible for treatment and to the Data Protection Officer within 72 hours from the moment the Referente learns of it.
These lines are LexLint's reading of the law's text.
What it makes you log
Logging duty
Article 13, paragraph 2 sets a 72-hour internal report to the person responsible for treatment and to the Data Protection Officer. It names no log the controller must keep; the Register of treatment activities is Article 9, which this row does not cite.
- Kind
- None
- As of
What this law does
Article 13, paragraph 2 requires the Referente to communicate to the person responsible for treatment and to the Data Protection Officer, within 72 hours from the moment the Referente learns of it, the violations of the Security Measures and the resulting violations of Personal data that are found.
Article 3 defines a violation of Personal data as a violation of the security measures that leads, accidentally or knowingly, to the destruction, loss, alteration, unauthorized disclosure of or access to Personal data that are transmitted, stored or otherwise treated.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .