Attention data subjects! The NCPDP recommends maximum attention when transmitting/offering personal data

Based on the multiple recent cases in the media, as well as from the urgent need to protect the confidentiality of the personal data of natural persons, the National Center for Personal Data Protection (NCPDP) advises the following recommendations and warnings for data subjects:

The NCPDP urges data subjects to exercise the utmost caution when disclosing, transmitting, disseminating personal data concerning them.

It should be remembered that identity documents (such as identity cards, passports), civil status certificates, pensioners’ cards, bank cards, etc. contain lots of personal data which require effective protection by the holder.

Thus, giving/transmitting copies of these documents, as well as writing personal data in various lists/documents by the data subject for purposes other than those expressly provided for by law, may result in their unlawful use for purposes contrary to those originally intended, and against the data subject. Likewise, the personal data subject could lose control over his/her personal data.

If you are asked to provide your identity documents and/or to provide copies of these documents, as well as to provide personal data such as: your name, surname, IDNP, home address, bank card details, income, pension amount, etc. under different pretexts by third parties, you have to make sure about the legality of the collection of personal data and the subsequent use of these data.

However, according to the provisions of Law 133/2011 on personal data protection, the personal data that are the subject of processing must be: processed fairly and lawfully; collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; adequate, relevant and not excessive in relation to the purposes for which they are collected and/or further processed.

At the same time, the NCPDP points out that, in the case of the voluntary provision/transmission of personal data, recorded on various documents or by inclusion in some lists/documents, the collection of such personal data is based on/determines the existence of the consent of the personal data subject (Art. 5 para. (1) of Law 133/2011), even if the subsequent use of such data is proven to be carried out for other purposes/to the detriment of the data subject concerned.

The NCPDP, as the national supervisory authority for the processing of personal data, emphasizes the responsibility of every citizen to ensure the protection of personal data, and the security and confidentiality of such data must be a priority.