A new Article 8 shall be added after Article 7 of the Convention as follows:
“Article 8 – Transparency of processing
- 1.
- Each Party shall provide that the controller informs the data subjects of:
- a)his or her identity and habitual residence or establishment;
- b)the legal basis and the purposes of the intended processing;
- c)the categories of personal data processed;
- d)the recipients or categories of recipients of the personal data, if any; and
- e)the means of exercising the rights set out in Article 9,
- as well as any necessary additional information in order to ensure fair and transparent processing of the personal data.
- 2.
- Paragraph 1 shall not apply where the data subject already has the relevant information.
- 3.
- Where the personal data are not collected from the data subjects, the controller shall not be required to provide such information where the processing is expressly prescribed by law or this proves to be impossible or involves disproportionate efforts.”
