- An order to cease the processing of the personally identifiable
information;
- The cancelling/withdrawal of the authorization issued enforcing
the present law;
- The locking of some personally identifiable information.
Section 56: All sanction pronounced by the Commission may be accompanied
with an order to operate, in a delay not to exceed eigth (08) days, any useful
modification or suppression/cancelling in the functioning of personally
identifiable information processings, subject to the sanction.
Section 57: The sanctions provided by the present law are pronounced in a
report made by the Commission. This report is submitted to the responsible of
the processing, that may make written or oral observations, and attend or be
represented in sessions which end with decisions taking by the Commission.
The decisions reached by the Commission are justified and notice is given to
the responsible of the processing.
Section 58: The decisions pronouncing/stating a sanction may be subject of
appeal before the competent administrative jurisdiction.
Section 59: The amount of the pecuniary sanction is proportional to the
importance of the violation/breach committed and to the advantages deriving
from such breaches/violations.
Section 60: The following actions are considered important/serious violations:
- Disloyal gathering of personal data;
- Releasing to an unauthorized third party individual personal data;
- Gathering sensitive/classified data, data related to infrengments or to a
national identification number without observing the legal conditions.