These public and private institutions are in violation of Article 7 of the Data Protection Act. In accordance with the provision of this article, any processing of personal data is subject to a prior declaration filed at the headquarters of the National Authority for the Protection of Personal Data against receipt or notified by registered letter with acknowledgment of receipt or by any other means leaving a written trace. The main objective of these measures is to raise awareness of the importance of the texts relating to the protection of personal data, stressed Chawki Gaddes.
As a reminder, INPDP is responsible for ensuring the proper application of the law on the protection of personal data and the respect of individuals’ rights.
source : cybersecuritymag.africa