GDPR Requirements At the time of the collection of personal data, all information must be communicated to the data subject (Article 13 (1), (2) + Article 14 (1), (2)). Resulting Challenge According to the EU-GDPR guidelines, the information must be understandable, easily accessible and communicated in clear and simple language in a written or electronic…
GDPR Requirements The data subject has a right of access to the following information: Processing purposes, categories of personal data, recipients or categories of recipients (third countries, organizations), planned storage time, right of rectification and erasure, right of appeal, origin of the data if the personal data was not directly collected, automated decision making including…
GDPR Requirements The data subject has the right to obtain from the controller the rectification without delay of incomplete or inaccurate personal data concerning him or her (Article 16). Resulting Challenge The user must be able to request that his or her personal data be rectified or completed. In order to provide such a function,…
GDPR Requirements A user may request the deletion of personal data concerning him or her. The data controller is obliged to delete data, if the request is justified (Article 17 (1 a-f)). This includes the revocation of consent. The request for deletion shall be forwarded to other affected data controllers as well (Article 17 (2)).…
GDPR Requirements Under certain conditions (Article 18 (1)), the data subject has the right to request limited data processing from the data processors. Resulting Challenge The following challenges can be derived from the three paragraphs of the article (Article 18): Each process must be isolated from the others so that the restriction has no impact…
GDPR Requirements Indicates that the responsible person is obliged to inform all recipients to whom personal data have been disclosed of any rectification, erasure or limitation of the processing of such data. In addition, the data processor is obliged to inform the data subject of these recipients upon request (Article 19). Resulting Challenge Changes to…
GDPR Requirements If the data processing is automated based on a consent or a contract, the data subject has the right to obtain personal data concerning him/her in a structured, common and machine-readable format. The data subject may communicate this data to other data processors (Article 20 (1)). Resulting Challenge The following challenges can be…