NCPDP trained CNAM employees in the field of personal data protection

National Center for Personal Data Protection (NCPDP) performed, on March 16, a training course in the field of personal data protection for the employees of the National Insurance Company in Medicine (CNAM) at the request of the institution. The event was attended by about 100 persons.

The topics addressed in the training were: the principles of personal data protection, the rights of the data subjects, the recommendations on identifying the filing systems in which the processing of personal data takes place, the regulatory framework for data protection and implementation of legal requirements in that area.

“If personal data are collected directly from the data subject and at the latest at the time of first disclosure, he must be provided with the following information: the identity of the controller, the purpose of processing for which the data are collected, the recipients of personal data, the existence of the rights of access to data, the right of intervention upon data and the right to object, as well as conditions under which such rights may  be exercised and whether the answers to the questions intended to collect data are mandatory or voluntary, as well as the possible consequences of denial to respond ”, mentioned Denis Coțofan, Interim Deputy Head of the Legal Department of NCPDP.

Any personal data subject has the right to obtain from the controller or processor, upon request and free of charge: the rectification, update, blocking or erasure of personal data, the processing of which does not comply with the law, in particular because of their incomplete or inaccurate nature and the notification of the third parties to whom the personal data have been disclosed, about any operations performed, except where such notification proves to be impossible or involves disproportionate effort towards the legitimate interest that might be violated.

The participants in the training asked questions regarding the practical application of the legislation in the field of personal data protection, including the assurance of the legality of personal data processing in the information systems managed by CNAM.