More awareness, more complaints
The number is spectacular, at least in terms of percentage. And we are talking about an increase of almost 37% between one year and another. This is the most striking headline of the annual report recently published by the Catalan Data Protection Authority (APDCAT) and in which it details that it has managed a total of 843 complaints and claims during 2023, an increase compared to 2022 that it attributes mainly to greater citizen awareness of data protection and better knowledge of the associated rights.
In this sense, at least, we can say that we are on the right track. If we know our rights and have the tools at our disposal, we can defend them with total conscience.
This can be seen in the details published by the APDCAT, which has investigated and investigated 443 cases this year, of which 293 have been complaints for non-compliance with regulations and 150 claims for violation of rights. This represents an increase of 40% compared to 2022. The other interpretation, of course, is that despite people being more aware of how to protect their privacy, someone on the other side is not doing their job completely well. Data processing is a responsibility that cannot be taken lightly.
And as we say, it is no longer just for the satisfaction of doing things properly. It is because it can also involve more serious problems. Yes, sanctions. Regarding sanctioning procedures, the APDCAT has initiated 293 preliminary investigation actions during 2023. Of these, 87 have culminated in resolutions, which include warnings, financial sanctions and dismissals. If we look at the infractions, the most recurring issues have to do with the areas of health, the provision of services to citizens, human resources and the exercise of administrative powers.
Information, pedagogy, is fundamental in this entire environment, which is why it is striking that having exceeded 2,000 consultations at the public service of the Catalan Data Protection Authority, more than 80% are questions raised by individual citizens. It is a sign that there is concern about the rights and duties derived from the General Data Protection Regulation (RGPD) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD), as well as about access and transfer of information containing personal data.
One last point to highlight. What topics do data protection professionals who need technical help ask APDCAT about? Nothing entirely unexpected: video surveillance, the designation and communication of the data protection officer, the preparation and management of the register of processing activities, the review of information clauses, the duty to inform, the legality of data processing (including consent), and the processing and publication of images. We have talked about it all.
