GDPR Requirements Personal data shall be processed in a transparent manner that is understandable to the data subject (Article 5 (1a)). Resulting Challenge The manner in which a service operates, and all relevant data processed in relation to an individual shall be identified and disclosed. It has to be stressed that disclosure and expulsion are…
GDPR Requirements Personal data must only be collected for specified, explicit and legitimate purposes and may not be further processed in an incompatible manner. Further processing for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes (Article 89 (1)) must not be considered incompatible with the original purposes (Article…
GDPR Requirements: Personal data must be adequate and relevant to the purpose and limited to what is necessary for the purposes of the processing (Article 5 (1c)). Resulting Challenge: Reduce the amount of data processed and the number of stakeholders. Furthermore, the minimum amount of personal data necessary for processing purposes shall be identified. Technical…
GDPR Requirements Personal data must be correct and up to date. All reasonable measures must be taken to ensure that personal data, which is inaccurate in relation to the purposes for which it is processed, is deleted or rectified without delay (Article 5 (1d)). Resulting Challenge The system must provide an interface for the erasure…
GDPR Requirements Personal data must be stored in a form, which permits identification of the data subjects only if it is necessary for the purposes for which they are processed (Article. 5 (1e)). Resulting Challenge The storage duration of personal data must be defined. In fulfilling the purpose, personal data must be removed from the…
GDPR Requirements At the time of the collection of personal data, all information must be communicated to the data subject (Article 13 (1), (2) + Article 14 (1), (2)). Resulting Challenge According to the EU-GDPR guidelines, the information must be understandable, easily accessible and communicated in clear and simple language in a written or electronic…
GDPR Requirements The data subject has a right of access to the following information: Processing purposes, categories of personal data, recipients or categories of recipients (third countries, organizations), planned storage time, right of rectification and erasure, right of appeal, origin of the data if the personal data was not directly collected, automated decision making including…
GDPR Requirements The data subject has the right to obtain from the controller the rectification without delay of incomplete or inaccurate personal data concerning him or her (Article 16). Resulting Challenge The user must be able to request that his or her personal data be rectified or completed. In order to provide such a function,…
GDPR Requirements A user may request the deletion of personal data concerning him or her. The data controller is obliged to delete data, if the request is justified (Article 17 (1 a-f)). This includes the revocation of consent. The request for deletion shall be forwarded to other affected data controllers as well (Article 17 (2)).…
GDPR Requirements Under certain conditions (Article 18 (1)), the data subject has the right to request limited data processing from the data processors. Resulting Challenge The following challenges can be derived from the three paragraphs of the article (Article 18): Each process must be isolated from the others so that the restriction has no impact…