The development of new technology, the computerised processing of data and the increasingly wider use of the major information networks place the protection of personal data at great risk.

Several studies suggest that our personal data could be held by up to 20 different databases (bank, electricity company or telephone operator and any type of association, sports club or gymnasium, and so on).

This state of affairs has led developed countries to take measures, such as the establishment of global norms and the foundation of organisations to manage these rights.

The organisation defending Spanish rights
In Spain, the Agencia Espa�ola de Protecci�n de Datos (AEPD) is the entity entrusted with guaranteeing that the Ley Organica de Proteccion de Datos (Personal Data Protection Law) is complied with. The AEPD also controls the application of the norms regarding the right to information, and the access, rectification, opposition to and cancellation of data.

All Spanish citizens have an unlimited and free right to access their personal data. According to Spanish legislation, information can be obtained via a simple consultation of visual data... and the data supplier must answer the request for information within a maximum term of one month. The law indicates that this type of information includes the personal details of the interested party as well as the information resulting from any type of elaboration or computer processing, including the origin
of the data, the assignors of the same and the specification of the use and purpose for which the data is stored.

Recognised rights
In addition to the right to access and consult, the citizen has the right to cancel, oppose, challenge, receive damages and information, be excluded from telephone directories and not receive unwanted advertising.

The Data Protection Law also specifies that those responsible for storing the data are obliged to keep professional secrecy with regard to the information and respect the right to withhold it. If this obligation is infringed, a heavy fine could be handed down. What is more, when personal data is changed without the interested party's permission, he or she must be expressly and precisely informed by those responsible for storing the data (or their representatives) within a term of three months or less from the time of registration, except in those cases where the data processing has historic, statistical or scientific ends.

When and how to make a claim
Those individuals who believe they have been subject to an infringement of the Ley Org�nica de Protecci�n de Datos de Car�cter Personal (Personal Data Protection Law) can file a claim at the Spanish Data Protection Agency. The brief filed must include: the personal data of the interested party (or representative), the facts and grounds of the petition, the signature of the applicant, the place and date, and the organisation or administrative body to which the claim is addressed (Subdirecci�n General de Inspecci�n de Datos de la Agencia de Protecci�n de Datos).

Any consultation, clarification, claim, suggestion or complaint must be addressed to:
Agencia Espa�ola de Protecci�n de Datos
Calle Sagasta 22
28004 Madrid
Tel: 91 399 62 00