Act 2018
Protection of Natural Persons with Regard to the Processing of Personal Data (Consolidated Text) – Legge 21 dicembre 2018 n. 171 (Law no. 171 of 21 December 2018)
Issued by Autorità Garante per la Protezione dei Dati Personali
Summary
San Marino's data protection law. It lists lawful grounds for processing (Art. 5), notice duties (Arts. 13-14), data subject rights (Arts. 15-22), breach notification (Arts. 34-35) and data protection officers (Arts. 38-40). The Authority's powers are in Art. 59, and its decisions apply administrative sanctions under Arts. 72-73. The consolidated text includes amendments up to Law 207 of 22 December 2021.
Topics: Data Protection & Privacy
Who it applies to
All industries
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Lawful basis, notice and data subject rights | — | Autorità Garante per la Protezione dei Dati Personali | source | |
Art. 5 lists the grounds for lawful processing, Arts. 13 and 14 require information to data subjects (within one month where data was not collected from them, Art. 14(3)), and Arts. 15-22 give rights of access, rectification, erasure, restriction, portability, objection and protection against automated decisions. |
||||
| Personal data breach notification | Deadline Within 72 hours of awareness, where feasible | Autorità Garante per la Protezione dei Dati Personali | source | |
Art. 34(1) requires the controller to notify the Data Protection Authority not later than 72 hours after becoming aware of a breach, where feasible. Art. 35 covers communication to affected data subjects. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.