Lawfulness of the processing of perso-nal data by CIS

Abstract

This paper analyzes the most relevant cases, from the pragmatic point of view, where the processing of personal data by credit information systems is considered lawful. To this end, it establishes, in Title IV of Organic Law 3/2018, of 5 December, on "protection of personal data and guarantees of digital rights" a rebuttable presumption of the processing of said data when a series of requirements are met, without expressly excluding the lawfulness when they are not respected, which must be carried by the person responsible for the computer file with the legally required weighting.