Purpose Limitation
GDPR Requirements Personal data must only be collected for specified, explicit and legitimate purposes and may not be further processed in an incompatible manner. Further processing for archival purposes of…
Data Minimization
GDPR Requirements: Personal data must be adequate and relevant to the purpose and limited to what is necessary for the purposes of the processing (Article 5 (1c)). Resulting Challenge: Reduce…
Accuracy
GDPR Requirements Personal data must be correct and up to date. All reasonable measures must be taken to ensure that personal data, which is inaccurate in relation to the purposes…
Storage Limitation
GDPR Requirements Personal data must be stored in a form, which permits identification of the data subjects only if it is necessary for the purposes for which they are processed…
Information Obligation
GDPR Requirements At the time of the collection of personal data, all information must be communicated to the data subject (Article 13 (1), (2) + Article 14 (1), (2)). Resulting…
Right of Access by the Data Subject
GDPR Requirements The data subject has a right of access to the following information: Processing purposes, categories of personal data, recipients or categories of recipients (third countries, organizations), planned storage…
Right to Rectification
GDPR Requirements The data subject has the right to obtain from the controller the rectification without delay of incomplete or inaccurate personal data concerning him or her (Article 16). Resulting…
Right to Erasure
GDPR Requirements A user may request the deletion of personal data concerning him or her. The data controller is obliged to delete data, if the request is justified (Article 17…
Right to Restriction of Processing
GDPR Requirements Under certain conditions (Article 18 (1)), the data subject has the right to request limited data processing from the data processors. Resulting Challenge The following challenges can be…
Notification Obligation
GDPR Requirements Indicates that the responsible person is obliged to inform all recipients to whom personal data have been disclosed of any rectification, erasure or limitation of the processing of…