How to define the most relevant legal basis for personal data processing under the GDPR
On its entry into force, the GDPR would make reliance on data subjects’ consents inappropriate for many personal data processing activities. A practical tip to self-test current consents: if it seems difficult for a controller to obtain a valid consent, perhaps there is another legal ground that should apply. When implementing a GDPR compliance strategy, […]
Consent of data subjects under the GDPR
One of the most common grounds for lawful processing of personal data is obtaining the data subject’s consent. As from 25 May 2018 when the GDPR shall enter into force, the requirements for obtaining lawfully such consent will be significantly amended. Despite being more burdensome for companies, the new requirements may serve as a competitive […]
Rights of data subjects under the General Data Protection Regulation
One of the EU’s key objectives in adopting the General Data Protection Regulation (“GDPR”) is to contribute to the well-being of individuals by reinforcing their rights with respect to their own personal data. As from 25 May 2018, persons and companies acting as data controllers should comply with the reinforced data subjects’ rights under the […]
Principles of personal data processing under the new EU data protection rules
The newly revised EU legal framework in the field of personal data protection has already made the processing of personal data an increasingly important topic for businesses operating in the territories of EU member states. As from 25 May 2018, the General Data Protection Regulation (“GDPR”) will become directly applicable in all EU states. With […]