The Office for Personal Data Protection (“OPPD”, “the Office”) has published its inspection plan for 2024. The OPPD will focus its inspection activities in 2024 on, among other things:
- the use of data from the population register by public authorities,
- the recording of telephone calls,
- processing of personal data in information systems
- within the Schengen area,
- the processing of personal data by the Police of the Czech Republic and
- the sending of unsolicited commercial communications.
With regard to the recording of telephone calls, the Authority will examine the practices associated with the recording, including their link to the provision of services where consent to such processing of personal data is required. It will also look at how these recordings are further processed, in particular the legitimacy of the purposes and legal basis, the information of data subjects and the retention period of personal data. In the first stage, questionnaires will be sent to the selected subjects. The Office checks the sending of unsolicited commercial communications on a regular basis. Now the Office will focus on delivery service operators and compliance with the conditions resulting from Section 7 of Act No. 480/2004 Coll, The Office will specifically examine the sending of commercial communications by e-mail and SMS, in particular the legal title to the distributions pursuant to Section 7(2) or (3) of the Act, and other conditions (identification of the commercial communication and the sender, the possibility to unsubscribe, etc.). The Office will select at least three entities from this sector (taking into account the complaints received) that use the sending of commercial communications by e – mail, SMS or mobile applications for their marketing activities. At the same time, in mid-March, the OIO will join with other EU supervisory authorities in a Coordinated Enforcement Framework (CEF) 2024 on the implementation of the right of access by data controllers.
Click HERE to view the PDF.