Must a New Authorisation to Process Personal Data Be Issued to an Employee When Only Their Job Position Changes?

ANSWER

If the existing authorisation contains information about the employee's previous job position, it must be updated. This may be done either by issuing a new authorisation at the time the position changes, or by making an annotation on the current authorisation to record the change of position, whilst leaving the existing data processing permissions unchanged.