Ina theannta sin, ní mór do rialaitheoirí féachaint chuige go honnghníomhach le measúnú tionchair ó thaobh an phríobháideachais de a dhéanamh i gcás ina mbeidh riosca ó thaobh an phríobháideachais de i gceist le hoibriú na gcomhad sonraí pearsanta (Airteagal 33(8) PIPA).
In addition, controllers must proactively endeavour to conduct a privacy impact assessment in the case where the operation of personal data files entails a privacy risk (Article 33(8) PIPA).
Is é cuspóir an mheasúnaithe tionchair ó thaobh an phríobháideachais de a áirithiú go ndéantar anailís ar thosca na rioscaí don phríobháideachas mar aon le haon fhrithbheart sábháilteachta nó aon fhrithbheart eile, agus go léirítear ábhair ar gá feabhas a chur orthu (féach Airteagal 33(1) PIPA i gcomhar le hAirteagal 38 d’Fhoraithne um Fhorfheidhmiú PIPA).
The purpose of the privacy impact assessment is to ensure that the privacy risk factors as well as any safety or other countermeasures are analysed, and to indicate matters that need improvement (see Article 33(1) PIPA in conjunction with Article 38 of the PIPA Enforcement Decree).
Bunaithe ar Airteagal 68 PIPA i gcomhar le hAirteagal 62 d’Fhoraithne um Fhorfheidhmiú PIPA, tarmligeadh cúraimí áirithe de chuid PIPC do Ghníomhaireacht Idirlín agus Slándála na Cóiré, eadhon: (1) oideachas agus caidreamh poiblí, (2) oiliúint a chur ar speisialtóirí agus critéir a fhorbairt le haghaidh measúnuithe tionchair ó thaobh an phríobháideachais de, (3) iarrataí a láimhseáil chun institiúid a ainmniú ar a dtugtar institiúid um measúnú tionchair ó thaobh an phríobháideachais de, (4) iarrataí a láimhseáil le haghaidh rochtain indíreach ar shonraí pearsanta arna sealbhú ag údaráis phoiblí (Airteagal 35(2) PIPA), agus (5) an cúram maidir le hábhair a iarraidh agus cigireachtaí a dhéanamh i leith gearán a fhaightear tríd an Lárionad Glaonna um Príobháideachas mar a thugtar air.
Based on Article 68 PIPA in conjunction with Article 62 of the PIPA Enforcement Decree, certain tasks of the PIPC have been delegated to the Korea Internet and Security Agency, namely: (1) education and public relations, (2) training of specialists and development of criteria for privacy impact assessments, (3) the handling of requests for designating a so-called privacy impact assessment institution, (4) the handling of requests for indirect access to personal data held by public authorities (Article 35(2) PIPA), and (5) the task of requesting materials and carrying out inspections with respect to complaints received through the so-called Privacy Call Centre.