The application of the legal data protection standards is guaranteed by administrative and judicial remedies, in particular, by the ‘habeas data’ action, which enables a data subject to take a data controller to court in order to enforce his right of access, rectification and deletion, and by independent supervision carried out by the supervisory authority, the Unit for the Regulation and Control of Personal Data (Unidad Reguladora y de Control de Datos Personales (URCDP)), which is invested with powers of investigation, intervention and sanction in line with Article 28 of Directive 95/46/EC, and which acts completely independently. Moreover, any interested party is entitled to seek judicial redress for compensation for damages suffered as a result of the unlawful processing of his personal data.

Viviane REDING

Vice-President

(1) OJ L 281, 23.11.1995, p. 31.

(2) Letter of 31 August 2011.

(3) Organisation of American States; OAS, Treaty Series, No 36, 1144 UNTS 123. http://www.oas.org/juridico/english/treaties/b-32.html

(4) Council of Europe: https://wcd.coe.int/wcd/ViewDoc.jsp?Ref=CM/Del/Dec(2011)1118/10.3&Language=lanEnglish&Ver=original&Site=CM&BackColorInternet=DBDCF2&BackColorIntranet=FDC864&BackColorLogged=FDC864

(5) Opinion 6/2010 on the level of protection of personal data in the Eastern Republic of Uruguay. Available at http://ec.europa.eu/justice/policies/privacy/docs/wpdocs/2010/wp177_en.pdf

ANNEX

Competent supervisory authority referred to in Article 1(2) of this Decision:

Unidad Reguladora y de Control de Datos Personales (URCDP)

Andes 1365, Piso 8

Tel. + 598 2901 2929 Int. 1352

11.100 Montevideo