S.L. 458.64 Art. 5Processing of personal data conducted by the Licensing Authority.  Cap. 586. 6 [S.L.

(1) The processing of personal data conducted by the

Licensing Authority for the purposes of these regulation shall fully comply with Regulation (EU) 2016/679 and the Data Protection Act including the regulations made thereunder and the fundamental rights and freedoms of the data subjects.

(2) The Licensing Authority, acting in its capacity of a controller in terms of Article 4(7) of Regulation (EU) 2016/679 shall perform the relevant processing operations which are strictly necessary for the purposes of these regulations.

(3) The controller, taking into account the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for the rights and freedoms of the data subjects, THIRD COUNTRIES FROM FREE ZONES AND CUSTOMS 458.64 AUTHORISED WAREHOUSES

shall implement appropriate technical and organisational measures, in an effective manner and to integrate the necessary safeguards into the processing, in order to protect the rights of the data subjects and to ensure a level of security appropriate to the risk.

(4) For the purpose of ensuring and to be able to demonstrate that the processing of data is performed in accordance with the provisions of Regulation (EU) 2016/679, the controller shall implement the appropriate data protection policies, which policies shall be periodically reviewed and updated where necessary.

(5) The controller shall ensure that the physical and, or electronic access to personal data processed for the purposes of these regulations shall be strictly granted to personnel authorised by the controller.

(6) The data protection officer designated by the controller in terms of Article 37(1)(a) of Regulation (EU) 2016/679 shall be consulted properly and in a timely manner on all issues in relation to the protection of personal data processed for the purposes of these regulations.