aforesaid data that a concerned person asks them to remove all links to these personal data, or any
copy or reproduction thereof.
When the person responsible for the processing has authorized a third party to publish the personal
data of the concerned person , he/she is deemed responsible for this publication and shall take all
appropriate measures to implement the right to digital oblivion and erasure of personal data .
Art 35- The person responsible for the processing shall carry out the erasure without delay, unless the
conservation of personal data is required:
- Either for the right to freedom of expression;
- or for reasons of general interest in the field of public health , in accordance with the law;
- or for the sake of compliance with a legal obligation to keep personal data under the legislation to
which the person responsible for the processing is subject.
Art 36- The person responsible for the processing shall establish appropriate mechanisms to ensure
the implementation of the rule of right to digital oblivion and to erasure of personal data or
periodically review the need to keep data in accordance with provisions of this Law.
When the erasure is completed, the person responsible for the processing shall not perform any
further processing of such personal data.
Art 37- The Data Protection Body shall adopt measures and guidelines for the purposes of specifying:
-
The conditions for the removal of links to these personal data, copies or reproductions thereof
existing in electronic communication services publicly available;
-
The conditions and criteria applicable to the limitations of the processing of personal data.
Art 38- When the personal data are subject to automated processing in a structured format and
commonly used , the person concerned has the right to obtain from the person responsible a copy of
the data undergoing processing automated in a structured electronic format that is commonly used
and allows reuse of these data by the persons concerned.
When the person concerned has provided the personal data and the processing is based on consent or
a contract, he/she has the right to forward these personal data and any other information he/she
provided and which are kept by an automated processing system to another system in a circuit
diagram which is commonly used without the person responsible for the processing to whom the
personal data are removed precludes it.
The Data Protection Body may specify the electronic format, as well as technical standards, methods
and procedures for the transmission of personal data.
CHAPITRE 6 :
Duties of Officers and their subordinates
Art 39- The processing of personal data is confidential. It is performed only by persons acting
under the authority of the person responsible for the processing and only on his instructions.
Art 40- The processing of personal data is confidential. It is performed only by persons acting
under the authority of the person responsible for the processing and only on his instructions.