Filenews 28 June 2023
To the question of whether a private company is entitled to process citizens' data, regarding the issue of photolabelling based on the General Code of Personal Data, the Commissioner for Personal Data Protection herself, Irene Loizidou-Nikolaidou, answers positively.
Specifically, as explained in a written statement, each controller, in this case the Director of Traffic Police, in the context of his legal activities, may assign the execution of processing operations to a processor, in this case the contractor company. A prerequisite is the conclusion of a written Processing Assignment Agreement that binds the contractor company to take appropriate security measures to protect citizens' data.
Other examples of outsourcing processing to individuals are checks at airports and the issuing of driving licences.
