Codes of conduct according to data protection legislation
Who creates codes of conduct?
Organisations and other parties representing specific industries or sectors may draw up codes of conduct after consultation with stakeholders, including the public, where appropriate.
They may also make changes to the previous rules in order to adapt them to the Data Protection Regulation.
A draft of a code of conduct for the Data Protection Authority must be submitted for approval.
Data Protection Authority will give its opinion on whether the draft is compatible with the Data Protection Regulation and will approve it if it considers that it ensures adequate and appropriate safeguards.
If the code of conduct covers the processing of personal data in other countries within the EEA, Data Protection Services will submit them to the European Data Protection Supervisory Authority.
The Council’s opinion on the code is then submitted to the European Commission, which can decide whether the code of conduct is considered to be valid in all EEA states.
