S.L. 363.240 Art. 4Data Protection. Cap. 586.

(1) These regulations shall not prejudice the applicability of Regulation (EU) 2016/679 and of the Data Protection Act, including the regulations made thereunder, and the fundamental rights and freedoms of the data subjects.

(2) The Local Council acting in its capacity of a controller in accordance with Article 4(7) of Regulation (EU) 2016/679 shall OF ENSURING PROPER WASTE MANAGEMENT

perform the relevant data processing operations which are limited to the extent necessary and proportionate to the objective pursued by the Local Council.

(3) For the purposes of these regulations, the processing of personal data shall fully comply with all the principles relating to the processing of personal data pursuant to Article 5 of Regulation (EU) 2016/679.

(4) The Local Council shall provide the data subjects with the information stipulated in Article 14(1) and (2) of Regulation (EU) 2016/679 which is necessary to ensure fair and transparent processing.

(5) The Local Council shall take all reasonable steps and measures to ensure that the personal data processed for the purpose of these regulations are accurate and, where necessary, kept up to date.

(6) The Local Council, whilst taking into account the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of the data subjects, at the time of the determination of the means for processing as well as at the time of the processing itself, shall implement appropriate technical and organisational measures in an effective manner and integrate the necessary safeguards into the processing, in order to protect the rights of the data subjects and to ensure a level of security appropriate to the risk.

(7) For the purposes of ensuring and to be able to demonstrate compliance with the principles relating to the processing of personal data, the Local Council shall implement the appropriate data protection policies, which policies shall be periodically reviewed and updated where necessary.

(8) The data protection officer designated by the controller in accordance with Article 37 of Regulation (EU) 2016/679 shall be involved and consulted in a timely manner on all issues in relation to the protection of personal data processed for the purposes of these regulations.