S.L. 439.27 Art. 5Register.          Cap. 586.

(1) The Local Council shall keep a register of all feeders in a secure manner, which contains their respective feeding areas, the number of colonies and the amount of cats in each respective colony for the purpose of keeping record of the stray cats in the area and the person taking care of the colony. A copy of the updated register shall be sent to the Director on a biannual basis, during the first

(1) week and twenty-seventh (27) week of the calendar year.

(2) These regulations shall not prejudice the applicability of

Regulation (EU) 2016/679 of the European Parliament and of the

Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection

Regulation) and the Data Protection Act, including the regulations made thereunder, and the fundamental rights and freedoms of the data subjects.

(3) The controllers shall perform the relevant data processing operations which are limited to the extent necessary and proportionate to the objectives pursued by these regulations.

(4) The controller shall only process the personal data contained in the register for the purpose of inspection, education and enforcement of these regulations.

(5) For the purpose of sub-regulation (1), the processing of personal data shall fully comply with all the principles relating to the processing of personal data in accordance with Article 5 of Regulation

(EU) 2016/679.

(6) The controller, whilst taking into account the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity of the rights and freedoms of the data subjects, shall implement appropriate technical and organisational measures in an effective manner and integrate the necessary safeguards into the processing, in order to protect the rights of the data subjects and to ensure a level of security appropriate to the risk.

(7) For the purposes of ensuring and of being able to demonstrate compliance with all the principles relating to the processing of personal data, the controller shall implement the appropriate data protection policies, which policies shall be periodically reviewed and updated where necessary.

(8) The data protection officer designated by the controller in accordance with Article 37 of Regulation (EU) 2016/679 shall be involved and consulted in a timely manner on all issues in relation to the protection of personal data processed for the purposes of these regulations.