Which entities are required to have an Internal Information System?

(Articles 10 and 13)

The obligation to have an Internal Information System has a different scope in the public and private sectors.

In the private sector, natural or legal persons who have fifty or more employees are required to do so. Also those that fall within certain areas of application of Union acts (services, products and financial markets; prevention of money laundering or terrorist financing; transport security; environmental protection) regardless of the number of workers. Likewise, political parties, trade unions, business organizations and foundations created by each other are obliged entities, as long as they receive or manage public funds.

There is no exemption in the public sector. All entities are required to have an internal channel, although certain entities are allowed to share, with each other or with the enrollment administration, the Internal Information System and resources for investigations and processing.