In terms of article 29 of the Data Protection Act, it is now obligatory to register with the Data Protection Commissioner if an individual or a legal entity handles or processes personal data.
Processing of Personal Data means any operation or set of operations which is taken in regard to any information relating to an identified or identifiable natural person; (an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity), whether or not it occurs by automatic means, and includes the collection, recording, organisation, storage, adaptation, alteration, retrieval, gathering, use, disclosure by transmission, dissemination or otherwise making information available, alignment or combination, blocking, erasure or destruction of such data.
This implies that any individual or company which has any employees or deals with clients, has to register with the Data Protection Commission. The Data Protection Commissioner can, if a person or entity is not so registered, impose one time and daily fines on such individual or entity.
At KSi Malta, we have experienced professionals which can assist you in with the registration with the Data Protection Commissioner in terms of the Data Protection Act.
Please contact Dr Josef Cachia, our Legal Advisor, on email@example.com for further info.