Information duty

The Personal Data Protection Act imposes the duty of administrator of personal data (in case of the CIBR it is a bank) to inform data subjects (the banks' clients) before manipulating with his or her personal data. The administrator of personal data is obliged to inform the data subject in writing about the following matters: by what range and for what purpose will be those personal details processed, and to whom those personal details can be accessed and addressed.
 

Under this act the administrator of personal data shall provide the data subject for an adequate compensation, on written request, with all information on personal data processed about him or her. This information (so called the credit report from the CIBR) will be provided by the operator of the register, i.e. CBCB.