2. Member States shall ensure that when a security incident involves personal data, the penalties provided for are consistent with the penalties provided by the Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data(19).
It said that Google "provides insufficient information to its users on its personal data processing operations", adding that Google users cannot tell how their personal data are used.
"European Data Protection legislation provides a precise framework for personal data processing operations," the CNIL said.
However, the CNIL's press release is highly critical of Google, noting that it "provides insufficient information to its users on its personal data processing operations", doesn't tell people how long data will be held, and allows "uncontrolled" combination of data across its service.
"Google did not provide satisfactory answers on key issues such as the description of its personal data processing operations, or the precise list of the 60+ product-specific privacy policies that have been merged in the new policy," the CNIL said.
Support staff appointments encompass, but are not limited to, positions involving clerical duties as well as positions that support the Institute's data processing operations, the library and accounting functions, and some specialized research positions.
Support Staff: These appointments encompass positions involving duties of a primarily clerical/secretarial and administrative support nature, as well as some which support the Institute's data processing operations, the library and accounting functions, and some specialized research positions.
Incompletely punched cards can cause serious errors to occur in data processing operations utilizing such cards.
Therefore, the data processing operations have been designed independently from the underlying storage.
The data controller (the entity responsible for processing the data collected about you) appears on a public register of data processing operations maintained by the Data Protection Officer.
The data controller alone or jointly with others determines the purposes and means of the processing of personal data, while processors may be any entity involved in collecting, recording, organizing, storing, adapting, disseminating, disposing of, and consulting on operations involving that data.
