Article 20 of the Organic Law 15/1999 of 13 December on the Protection of Personal Data establishes that the creation, modification or deletion of the files of the Public Administrations may be made only by means of general provision published in the Official Journal of the State or the official journal concerned.

The personal data files of the Spanish Data Protection Agency are regulated by Resolution of 24 March 2009, creating, modifying and deleting files of personal data of the Spanish Data Protection Agency. Agency.

This resolution completes the relationship of the personal data files corresponding to the Spanish Data Protection Agency that was made public by the Resolution cited above on March 24. of 2009.

In its virtue, and in the exercise of the powers conferred on the Director of the Spanish Data Protection Agency, Article 12.2 of Royal Decree 428/1993 of 26 March, which approves the Statute of the Spanish Agency of Protection of Data, in force in accordance with the provisions of the third transitional provision of Organic Law 15/1999, and in order to complete the provisions of Article 20 of the Law, as well as Articles 52 and 54 of the development of the same, approved by Royal Decree 1720/2007, of 21 December, I have:

First.-The file of the Spanish Data Protection Agency called "Compliance LOPD" included in Annex I of this Resolution is created.

Second.-The file "Management of Citizens ' Attention Consultations", included in Annex II of this Resolution, created by Resolution of 24 March 2009 of the Spanish Agency for Data Protection, is adapted to the description contained in the relevant paragraphs of that Annex,

Third. -The files listed in the previous paragraphs of this Resolution shall be governed by the general provisions and instructions detailed for each of them, and shall be subject, in any case, to the rules legal and regulatory top-level applicable to them.

Fourth. -In compliance with Article 55 of the Law of the Development of Law 15/1999, the files will be notified for registration in the General Register of Data Protection within thirty days of publication of this Resolution in the "Official State Gazette".

Fifth. This Resolution shall enter into force on the day following its publication in the "Official State Gazette".

Madrid, March 25, 2010. -Director of the Spanish Data Protection Agency, Artemi Rallo Lombarte.

ANNEX I

New Create File

FILE: LOPD COMPLIANCE

a) Identification of the file, indicating its name, as well as the description of its intended purpose and uses.

a.1) File identification:

LOPD compliance.

a.2) Purpose and intended uses:

The purpose of the file is the management of the requests for information directed by the Agency to the different agencies and entities of different sectors of activity in the public and private areas in order to be able to evaluate the degree compliance with the LOPD and its Implementing Regulation.

(b) Origin of data, indicating the collective of persons on whom it is intended to obtain data of a personal nature or which are required to supply it, the procedure for collecting the data, and its provenance.

b.1) Collective:

Representatives of bodies and entities involved in the initiatives proposed by the Agency.

b.2) Provenance:

From the person himself, the entity or entity to which he represents.

c) Basic file structure and the treatment system used in your organization.

c.1) Structure:

Identifying data: First and last names, postal and e-mail address, telephone, fax.

Other personal data categories: Position or position played in the same.

c.2) Treatment system:

Automated file.

d) Communications of the intended data, indicating where appropriate, the recipients or categories of recipients:

There are no communications expected.

(e) International transfers to third countries, indicating, where appropriate, the countries of destination of the data: There are no planned international transfers.

f) Organs responsible for the file:

Spanish Data Protection Agency.

g) Services or units to which the rights of access, rectification, cancellation and opposition may be exercised:

Spanish Data Protection Agency.

General Secretariat.

Calle Jorge Juan, 6, 28001 Madrid.

h) Basic, medium or high level of security that is required, in accordance with the provisions of Title VIII RLOPD:

Basic level.

ANNEX II

(File to be modified)

FILE: MANAGING CITIZEN CARE QUERIES.

a) Identification of the file, indicating its name, as well as the description of its intended purpose and uses.

a.1) File identification:

Managing citizen care queries.

a.2) Purpose and intended uses:

Management of queries related to the protection of personal data that natural persons or representatives of legal persons pose to the Agency's Citizen Care Area.

(b) Origin of data, indicating the collective of persons on whom it is intended to obtain data of a personal nature or which are required to supply it, the procedure for collecting the data, and its provenance.

b.1) Collective:

Individuals who perform particular data protection queries. Persons who conduct consultations with the Agency on behalf of institutions, companies, associations, etc.

b.2) Provenance:

From the person concerned or his legal representative, collected in writing delivered in the Agency Register, sent by ordinary mail, e-mail, fax or by means of the corresponding form on the website of the Agency.

c) Basic file structure and the treatment system used in your organization.

c.1) Structure:

Identifying data:

First and last names, postal and e-mail address, telephone.

Data specially protected:

Data specially protected in Article 7 of Organic Law 15/1999, related to the consultations that are dealt with when they are contributed by the interested party or his legal representative.

c.2) Treatment system:

partially automated file.

d) Communications of the intended data, indicating where appropriate, the recipients or categories of recipients:

No data communications are planned.

(e) International transfers to third countries, indicating, where appropriate, the countries of destination of the data:

No international data transfers are planned.

f) Organs responsible for the file:

Spanish Data Protection Agency.

g) Services or units to which the rights of access, rectification, cancellation and opposition may be exercised:

Spanish Data Protection Agency.

General Secretariat.

Jorge Juan Street, 6, 28001

Madrid.

h) Basic, medium or high level of security that is required, in accordance with the provisions of Title VIII RLOPD:

Basic Level.