July 9, 2018 reported we that in Liechtenstein on July 20, 2018 both the GDPR, and a transitional data protection legislation will come into force. The legal provisions are set out in the Government report and proposal (BuA No. 37/2018) can be viewed.
According to BuA 37/218, as of the incorporation of the GDPR into the EEA Agreement.
- legal persons are excluded from the scope of protection of the current DPA and
- assigned to the data protection authority the corresponding competences to exercise the EEA law competences and tasks (in particular the activity as lead authority under the GDPR).
Art. 2 par. 1 introductory sentence and par. 5
1) This law applies to the processing of data of natural persons by:
5) This Act shall not apply to the extent that the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1), are directly applicable.
Art. 3 para. 1 let. b
1) For the purposes of this Act mean:
b) “data subjects” means natural persons about whom data are processed;
Art. 32a
Tasks and powers under Regulation (EU) 2016/679
The Data Protection Authority shall perform the tasks and exercise the powers referred to in Section 2 of Chapter VI of Regulation (EU) 2016/679, with the exception of those referred to in Article 58(2)(i) in conjunction with Article 83; in particular, the Data Protection Authority may act as the lead supervisory authority within the meaning of Article 56 of Regulation (EU) 2016/679.
Art. 34 let. d
The Data Protection Commission decides on:
(d) appeals against decisions and rulings of the data protection authority pursuant to Section 2 of Chapter VI of Regulation (EU) 2016/679.
Entry into force
This Act shall enter into force simultaneously with the Decision of the EEA Joint Committee concerning the adoption of Regulation (EU) 2016/679.