The document developed by the Ministry of Finance details the responsibilities of the data storage service provider, the State Enterprise Center for Information Technologies in Finance, and establishes rules for contracting and data management.
The new provisions stipulate that the provider must establish and operate a data warehouse, ensure portability and continuity of information between warehouses, take measures to ensure confidentiality, integrity and availability of data, including compliance with legislation on personal data protection.
The term of the contract is set at a minimum of 5 years, renewable, and competent authorities have unrestricted access for audit and inspection. The contracts also clearly define the liability of the provider, including in case of breach of privacy or security rules, and prohibit the suspension of services for payment delays of less than 30 days. The full transfer of data to the new provider in the event of a change of provider is also regulated.
The adoption of the Regulation provides a clear and uniform framework for the operation of the tracking system, guaranteeing transparency and predictability for economic operators and supporting authorities in preventing illicit trade in tobacco products.
