Control of personal data processing

Control of personal data processing, control of compliance with the code of conduct approved by the office pursuant to § 85, control of compliance of personal data processing with the issued certificate pursuant to § 86 and control of compliance with the issued certificate of accreditation pursuant to § 87 and § 88 (hereinafter referred to as "control") is carried out by the office through control body composed of employees of the office (hereinafter referred to as "control body").

Each member of the control body carries out the control based on the written authorization of the senior employee; if the senior employee is a member of the control body, the members of the control body carry out the control based on the written authorization of the head of the office.

The supervisory authority shall conduct an inspection on the basis of a plan of inspections or on the basis of a suspicion of a violation of obligations in the processing of personal data established by this Act or a special regulation or within the framework of proceedings on the protection of personal data.