S.L. 65.29 Art. 7Processing of personal data.

(1) In the processing of personal data in accordance with these regulations, Regulation (EU) 2016/679, the Data Protection

Act, the Processing of Personal Data (Electronic Communications

Sector) Regulations and the Data Protection (Processing of Personal

Data by Competent Authorities for the Purposes of the Prevention, Investigation, Detection or Prosecution of Criminal Offences or the

Execution of Criminal Penalties) Regulations, shall apply.

(2) The Authority shall, in accordance with applicable data protection legislation, take the measures necessary, to ensure that:

(a) the processing of personal data for the purposes of regulation 3 is limited to the types of data listed in the First Schedule;

(b) personal data is accurate, kept up-to date and requests for rectification or erasure, where applicable, are handled without undue delay; and

(c) where applicable, a time limit is established for the storage of personal data.

(3) The Authority shall take the measures necessary to ensure that personal data processed under these regulations is used only for the purpose of the identification of the vehicle and the owner or holder of the vehicle in relation to which a failure to pay a road fee in another Member State has been established within the scope of regulation 3.

(4) Any person concerned shall have the right to obtain, without undue delay, information from the Authority on which personal data recorded in the Authority’s registration was transmitted to a Member State in which there was a failure to pay a road fee, including the date of the request and the competent authority of the Member State in whose territory there was a failure to pay a road fee.