Nerpio entrusts its Data Protection Officer to the Provincial Council of Albacete

The Nerpio City Council has entrusted the Provincial Council of Albacete with the duties of the Data Protection Officer, thereby ensuring compliance with the General Data Protection Regulation within the municipality. The agreement is formalized through a management entrustment convention, published as an announcement in the Official Gazette of the Province of Albacete number 99, dated August 26, 2026, in the third section of Local Administration.

The decision was adopted by the plenary session of the Nerpio City Council on August 1, 2026, by an absolute majority of its members, and accepted by the president of the Provincial Council via decree number 3635, dated August 7, 2026. The convention will enter into force the day following its publication in the official gazette.

Regulatory Framework

The entrustment is based on Article 34 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, and Article 37 of Regulation (EU) 2016/679 (General Data Protection Regulation), which mandate the appointment of a Data Protection Officer.

The legal support for the collaboration is completed by Article 36 of Law 7/1985, of April 2, regulating the Bases of the Local Regime, which obliges provincial councils to assist city councils, and Article 11 of Law 40/2015, of October 1, on the Legal Regime of the Public Sector, which regulates the entrustment of management. The Provincial Council had already established this collaboration mechanism through a plenary agreement on May 8, 2019.

Signing Parties

The convention was signed by both administrations with their respective officials:

• Santiago Cabañero Masip, president of the Provincial Council of Albacete, assisted by the general secretary Francisco Suay Ojalvo.
• José Antonio Gómez Moreno, mayor of Nerpio, assisted by the city council secretary José Manuel Sánchez Entrena.

Obligations and Rights

The Provincial Council will exercise the functions of the Data Protection Officer through its Data Protection Unit, without prejudice to the fact that the ownership of the competence remains with the entrusting City Council. The municipality’s obligations include:

• Creating a Record of Processing Activities on the electronic platform provided by the Provincial Council.
• Requesting a favorable report from the Data Protection Unit before approving or rectifying said record.

For its part, the City Council may use the electronic platform free of charge and request advice from the Data Protection Unit. The Provincial Council may require compliance with legal obligations and, in the event of non-compliance, reject the entrustment.

Validity and Termination

The term of the agreement shall be four years, extendable by unanimous agreement of the parties for a period of up to four additional years. The agreement may be terminated by mutual consent, by written notice from any of the parties, or by revocation or waiver in the event of breaches, following a hearing process. The resolution of disputes shall fall under the jurisdiction of the Administrative Litigation Court of Albacete.

With this assignment, Nerpio joins the municipalities of the province that outsource the role of the Data Protection Officer, a service that strengthens legal certainty in the processing of residents’ personal data and lightens the technical burden on small town councils, which lack their own means to assume this function.

Source: Official Gazette of the Province of Albacete, number 99, August 26, 2026, Third Section. Local Administration, p. 14 (official reference: announcement of the Provincial Council of Albacete, Archive Service).