Position of the data privacy officer

68.(1) The data controller and the data processor shall ensure that the data privacy officer is involved, properly and in a timely manner, in all issues which relate to the protection of personal data.

(2) The data controller and data processor shall support the data privacy officer in performing the duties and functions referred to in section 69 by providing resources necessary to carry out those tasks and access to personal data and processing operations, and to maintain his expert knowledge.

(3) A data privacy officer shall not be dismissed or penalised by the data controller or the data processor for performing duties and functions referred to in section 69.

(4) A data privacy officer shall report directly to highest management level of a data controller or a data processor.

(5) Data subjects may contact the data privacy officer with regard to all issues related to processing of their personal data and to the exercise of their rights under this Act.

(6) A data privacy officer is required to keep confidential all matters concerning the performance of his duties and functions referred to in section 69.