GDPR Requirements Personal data must be correct and up to date. All reasonable measures must be taken to ensure that personal data, which is inaccurate in relation to the purposes for which it is processed, is deleted or rectified without delay (Article 5 (1d)). Resulting Challenge The system must provide an interface for the erasure…
Details
GDPR Requirements Personal data must be stored in a form, which permits identification of the data subjects only if it is necessary for the purposes for which they are processed (Article. 5 (1e)). Resulting Challenge The storage duration of personal data must be defined. In fulfilling the purpose, personal data must be removed from the…
Details
GDPR Requirements At the time of the collection of personal data, all information must be communicated to the data subject (Article 13 (1), (2) + Article 14 (1), (2)). Resulting Challenge According to the EU-GDPR guidelines, the information must be understandable, easily accessible and communicated in clear and simple language in a written or electronic…
Details
GDPR Requirements The data subject has a right of access to the following information: Processing purposes, categories of personal data, recipients or categories of recipients (third countries, organizations), planned storage time, right of rectification and erasure, right of appeal, origin of the data if the personal data was not directly collected, automated decision making including…
Details
GDPR Requirements The data subject has the right to obtain from the controller the rectification without delay of incomplete or inaccurate personal data concerning him or her (Article 16). Resulting Challenge The user must be able to request that his or her personal data be rectified or completed. In order to provide such a function,…
Details
GDPR Requirements A user may request the deletion of personal data concerning him or her. The data controller is obliged to delete data, if the request is justified (Article 17 (1 a-f)). This includes the revocation of consent. The request for deletion shall be forwarded to other affected data controllers as well (Article 17 (2)).…
Details
GDPR Requirements Under certain conditions (Article 18 (1)), the data subject has the right to request limited data processing from the data processors. Resulting Challenge The following challenges can be derived from the three paragraphs of the article (Article 18): Each process must be isolated from the others so that the restriction has no impact…
Details
GDPR Requirements Indicates that the responsible person is obliged to inform all recipients to whom personal data have been disclosed of any rectification, erasure or limitation of the processing of such data. In addition, the data processor is obliged to inform the data subject of these recipients upon request (Article 19). Resulting Challenge Changes to…
Details
GDPR Requirements If the data processing is automated based on a consent or a contract, the data subject has the right to obtain personal data concerning him/her in a structured, common and machine-readable format. The data subject may communicate this data to other data processors (Article 20 (1)). Resulting Challenge The following challenges can be…
Details
GDPR Requirements Appropriate technical and organizational measures shall be taken to ensure that the default settings of a service do not patronize users in the collection, processing, storage and disclosure of personal data. This is often referred to as Privacy by Default (Article 25 (2)). Resulting Challenge First, it is necessary that the collection, processing,…
Details