Political parties and/or politicians must make a notification to the Commission, in principle before their computerized processing of data relating to voters, contacts or members, apart from a few exceptions depending on whether it is the politician making propaganda or the political group.
Politicians are exempt from the duty of notification if they only process identification data necessary for their communication, if they do not transfer the data to third parties and if they do not keep it any longer to achieve their purpose (i.e. political propaganda).
Political groups are exempt from the duty of notification when they only contact the data subject to make political propagande, when the data subject is one of the party's members or benefactors or if they regularly enter into contact with the data subject, if the data was collected directly from the data subject and if they do not keep the data any longer than necessary to achieve their purpose.

If these conditions have not been met, there is no exemption and a notification has to be made.

It is also important to know that a fee has to be paid for notification. Afterwards, you can always modify or end your notification. To check whether a person has complied with the obligation of notification, anyone can consult the Commission’s public register.

Moreover, the controller must update the data. Because data become less accurate as time goes by, the controller regularly has to update his processing operation.