How is the creation of a PD processing commission regulated?

Question

Information Security

Hello. Question in the field of paper information security. What regulates the creation of a commission for the processing of personal data at an enterprise? In 152 FZ, 1119 PP there is no word "commission". At the same time, many security officers in their documents refer to 152 FZ.

Answer 1

Usually the algorithm is as follows:
1. There is a law A, it must be executed, otherwise you can get a cap.
2. The law does NOT prescribe the order of execution and algorithms in general, there is only a statement about the desired end result.
3. The enterprise independently develops documentation on how this law is implemented at the enterprise.
Accordingly, the inspectors are interested in the result, and not the algorithm for achieving it.
Therefore, various commissions are usually created on the basis of an organization order. Something like "In pursuance of the requirements of Federal Law 152, I order the creation of a commission from ..."