The APDP alongside private individuals

Under Law no. 1.565 of December 3, 2024, you have 8 rights enabling you to retain control of your data, namely:

• the right to be informed (articles 10 and 11);
• the right of access to your data (article 12);
• the right to rectification of your data (article 13);
• the right to erasure of your data (article 14);
• the right to restriction of processing (article 15);
• the right to object to the processing of your data (article 17);
• the right to portability (Article 18);
• the right not to be subject to a decision which produces legal effects concerning you or significantly affects you and which is based solely on automated processing, including profiling (Article 19).

Knowing your rights pursuant to the Law is one thing. Knowing how to ensure compliance daily, in the private or professional sector is another thing.

Two apparently contradictory yet nonetheless reconcilable interests are indeed constantly at play, namely, on one side, the legitimate interests of the professional and, on the other, the respect for the privacy of the data subjects of the personal data processing that the said professional implements; interests between which a fair balance must be found.

Thus to help you, the APDP provides a section in which it answers all the questions you may have as an individual when your personal data are collected by a data controller.

Any person whose rights under the Law have been infringed may refer the matter to the President of the Authority, who will take all necessary steps to put an end to the infringement.

Sample letters to take action (filing a complaint, requesting indirect right of access) are available.

A contact section is also available.

Finally, a wide range of documents and tools (factsheets, activity reports, etc.) will be published regularly on our site to inform you and support you in your efforts.