GDPR Requirements Personal data shall be processed in a transparent manner that is understandable to the data subject (Article 5 (1a)). Resulting Challenge The manner in which a service operates, and all relevant data processed in relation to an individual shall be identified and disclosed. It has to be stressed that disclosure and expulsion are…
Details
GDPR Requirements Personal data must be stored in a form, which permits identification of the data subjects only if it is necessary for the purposes for which they are processed (Article. 5 (1e)). Resulting Challenge The storage duration of personal data must be defined. In fulfilling the purpose, personal data must be removed from the…
Details
GDPR Requirements Under certain conditions (Article 18 (1)), the data subject has the right to request limited data processing from the data processors. Resulting Challenge The following challenges can be derived from the three paragraphs of the article (Article 18): Each process must be isolated from the others so that the restriction has no impact…
Details
GDPR Requirements The data subject has the right to obtain from the controller the rectification without delay of incomplete or inaccurate personal data concerning him or her (Article 16). Resulting Challenge The user must be able to request that his or her personal data be rectified or completed. In order to provide such a function,…
Details
GDPR Requirements A user may request the deletion of personal data concerning him or her. The data controller is obliged to delete data, if the request is justified (Article 17 (1 a-f)). This includes the revocation of consent. The request for deletion shall be forwarded to other affected data controllers as well (Article 17 (2)).…
Details
GDPR Requirements If the data processing is automated based on a consent or a contract, the data subject has the right to obtain personal data concerning him/her in a structured, common and machine-readable format. The data subject may communicate this data to other data processors (Article 20 (1)). Resulting Challenge The following challenges can be…
Details
GDPR Requirements The data subject has a right of access to the following information: Processing purposes, categories of personal data, recipients or categories of recipients (third countries, organizations), planned storage time, right of rectification and erasure, right of appeal, origin of the data if the personal data was not directly collected, automated decision making including…
Details
GDPR Requirements Personal data must only be collected for specified, explicit and legitimate purposes and may not be further processed in an incompatible manner. Further processing for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes (Article 89 (1)) must not be considered incompatible with the original purposes (Article…
Details
GDPR Requirements Appropriate technical and organizational measures shall be taken to ensure that the default settings of a service do not patronize users in the collection, processing, storage and disclosure of personal data. This is often referred to as Privacy by Default (Article 25 (2)). Resulting Challenge First, it is necessary that the collection, processing,…
Details
GDPR Requirements Indicates that the responsible person is obliged to inform all recipients to whom personal data have been disclosed of any rectification, erasure or limitation of the processing of such data. In addition, the data processor is obliged to inform the data subject of these recipients upon request (Article 19). Resulting Challenge Changes to…
Details