The APDP’s missions

• raising public awareness of its functions, powers, and activities as well as its understanding of the risks, rules, safeguards, and rights relating to the protection of personal data and the particular attention to the right to data protection of minors and vulnerable persons, and to promote as part of its duties, the use of privacy-protecting technologies;

Example of “vulnerable persons”: employees, people with disabilities, the elderly, minors.

• information to data subjects to inform them of their rights and obligations by answering their questions and communicating on data protection;
• advice and support to the data controllers, processors and data subjects;
• the formulation of reasoned opinions on the processing submitted by the competent administrative and judicial authorities within the limits provided for by the Law;
• the list of processing operations made available to the public;
• the issuance of a reasoned opinion on high-risk impact assessments;
• the authorization in certain cases of data transfers to a State, a territory or an international organization that does not ensure an adequate level of protection;
• the control (verifications and investigations) of the implementation of the processing operations and the notification to the controller or processor of any breaches of the Law;
• the keeping of internal registers of violations of the Law and corrective measures taken;
• the immediate reporting to the Public Prosecutor of acts constituting crimes and offences;
• the investigation of all claims, petitions and complaints submitted by the data subjects;
• the implementation of indirect right of access;
• the validation and publication of the codes of conduct;
• the issuing of certifications and approvals to certification organizations, as well as their periodic reviews;
• the adoption and publication of guidelines or recommendations;
• the approval and publication of standard contractual clauses;
• the option to alert the Minister of State to changes in practices, legislation, and regulations that would no longer allow a State to be recognized as having an adequate level of protection by the Principality;
• the publication of a list of countries with an adequate level of protection;
• the cooperation with foreign data protection authorities;
• the drawing up of an annual activity report.

The Authority can moreover be consulted for an opinion:

• by the Minister of State or by the Secretary of State of Justice, Director of Judicial Services during the drafting of legislative or regulatory measures or directorial orders in the context of the administration of justice relating to the protection of personal data, as well as on all measures relating to data protection;
• by the President of the National Council when studying proposals or bills relating to data protection or the processing of such data.

In these two cases, the decisions may be made public by the APDP at its own initiative or, with its agreement, by the Authority that referred the matter to it.

The Authority may also propose to the Minister of State the introduction of special data protection provisions with regard to the use of new technologies.

These proposals may be made public at the initiative of the APDP.