MAINSYSTEMS 
distinguish the purpose of each institutional contact
1. Regulatory Concept & Core Standards
In this video we will work through a concrete decision: distinguish the purpose of each institutional contact. The aim is to explain the criterion used and apply it to a workplace situation. We will start with the concept, move to the procedure and finish with a case to solve. Authorities have different powers. Receiving reports, advising reporting persons, investigating breaches and collecting statistics are different functions. This course explains recipient selection and information preparation. Demonstrations use fictional data and send no real reports.
Article 19 designates CPDP as the central external-reporting and protection body under the Act. It refers reports and coordinates competent authorities. This differs from Regulation No 1 statistics. Under article 19(3), unlawful personal-data-processing complaints follow the general procedure of the relevant data-protection legislation.
Apply the following rule: The Commission for Personal Data Protection, CPDP/KZLD, is the central external reporting body and coordinates checks with competent authorities. Article 11 permits internal reporting, external reporting or both; the internal priority and exceptions for retaliation risk or ineffective handling do not create a universal prohibition on direct external reporting. The amendment published on 5 June 2026 changes article 20(3) on public positions and the Commission for Counteracting Corruption. Check current powers and transitional rules; CPDP remains the central external body. Public disclosure has separate conditions under article 7.
2. Practical Implementation & Procedure
State the intended result: reporting a breach, obtaining advice, requesting protection or meeting a reporting duty. Consult the official page and legal remit. Identify minimum necessary data. Where an authority has several roles, select the matching procedure and keep the source consulted. Do not reuse a form merely because it is familiar. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.
3. Case Study & Compliance Action
A team has a public-procurement concern and annual statistics. A colleague proposes attaching the entire file to the statistical return. The handler separates the purposes and checks the precise fields and recipients. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.
The exercise is as follows: Does a statistics request authorise sending complete case files? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.
No. Purpose, legal basis and instructions determine the data. Supply what is required through the proper route. Statistics can include specified official identifiers, but this does not permit unnecessary identities or attachments.
One mistake to avoid is: confusing an advisory authority with the investigator of every subject.
Now apply the national rule to a second decision. An advice page is presented as the sole destination for every report. What check is missing?
The recipient's powers and role must be confirmed. Advice, external receipt, investigation and protection may belong to different bodies. Also check the national conditions for the selected route. User information must help people find the correct procedure without requiring steps that do not exist in law.