Global Data Protection Agency
  • HOME
  • CONTACT US

This Regulation should apply to all matters concerning the protection of fundamental rights and freedoms

Recital item number 173

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The European Data Protection Supervisor

Recital item number 172

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Directive 95/46/EC should be repealed by this Regulation

Recital item number 171

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Objective of this Regulation

Recital item number 170

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Commission should adopt immediately applicable implementing acts

Recital item number 169

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Examination procedure

Recital item number 168

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Ensuring uniform conditions for the implementation of this Regulation

Recital item number 167

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Fulfilling the objectives of this Regulation

Recital item number 166

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Respect without prejudice

Recital item number 165

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The powers of the supervisory authorities

Recital item number 164

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Confidential information

Recital item number 163

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Where personal data is processed for statistical purposes

Recital item number 162

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

For the purpose of consenting

Recital item number 161

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

When personal data is processed for historical research purposes

Recital item number 160

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

When personal data is processed for scientific research purposes

Recital item number 159

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

When personal data is processed for archiving purposes

Recital item number 158

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Coupling information from registries

Recital item number 157

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing of personal data for archiving purposes

Recital item number 156

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Member State law or collective agreements

Recital item number 155

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The principle of public access to official documents

Recital item number 154

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Member States law should reconcile the rules governing freedom of expression and information

Recital item number 153

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Regulation not harmonising administrative penalties

Recital item number 152

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The legal systems of Denmark and Estonia

Recital item number 151

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Strengthen and harmonise administrative penalties

Recital item number 150

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Member States laying down the rules

Recital item number 149

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Strengthening the enforcement of the rules of this Regulation

Recital item number 148

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Specific rules on jurisdiction

Recital item number 147

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Compensation provided by the controller or processor

Recital item number 146

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Proceedings against a controller or processor

Recital item number 145

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Court seizure of proceedings

Recital item number 144

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The right to bring an action for annulment of decisions

Recital item number 143

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Data subject rights infringement considerations

Recital item number 142

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Data subject right to lodge a complaint

Recital item number 141

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Secretariat assistance

Recital item number 140

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Promoting the consistent application of this Regulation

Recital item number 139

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Condition for the lawfulness of a measure intended to produce legal effects by a supervisory authority

Recital item number 138

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Urgent need to act in order to protect the rights and freedoms of data subjects

Recital item number 137

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Applying the consistency mechanism

Recital item number 136

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The one-stop-shop mechanism

Recital item number 128

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Ensure consistent application of the Regulation throughout the Union

Recital item number 135

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Supervisory authorities participate in joint operations

Recital item number 134

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Supervisory authorities should assist each other in performing their tasks

Recital item number 133

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Awareness-raising activities by supervisory authorities

Recital item number 132

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Another supervisory authority acting as a lead supervisory authority

Recital item number 131

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Complaints lodged with non lead supervisory authorities

Recital item number 130

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Ensuring consistent monitoring and enforcement

Recital item number 129

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Supervisory authority not acting as the lead supervisory authority

Recital item number 127

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Joint decision agreement

Recital item number 126

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The lead authority

Recital item number 125

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing of personal data taking place in the context of the activities of an establishment

Recital item number 124

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Supervisory authorities monitoring the application of the provisions

Recital item number 123

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Supervisory authority competence

Recital item number 122

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

General conditions for the member or members of the supervisory authority

Recital item number 121

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Supervisory authorities provided with the financial and human resources

Recital item number 120

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Member State establishing several supervisory authorities

Recital item number 119

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Independence of supervisory authorities

Recital item number 118

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Establishment of supervisory authorities

Recital item number 117

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Personal data moving across borders outside the Union

Recital item number 116

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Third countries adoption of laws

Recital item number 115

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Commission taking no decision on the adequate level of data protection

Recital item number 114

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Qualified non repetitive data transfers

Recital item number 113

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Derogations should apply to data transfers

Recital item number 112

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Provisions made for data transfers

Recital item number 111

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

A group of undertakings engaged in a joint economic activity

Recital item number 110

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Use of standard data-protection clauses

Recital item number 109

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Absence of an adequacy decision

Recital item number 108

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Commission recognition

Recital item number 107

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Commission monitoring

Recital item number 106

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

International commitments

Recital item number 105

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Fundamental values of the Union

Recital item number 104

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Decisions made by the Commission

Recital item number 103

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Without prejudice to international agreements

Recital item number 102

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Flows of personal data to and from countries

Recital item number 101

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Enhancing transparency and compliance

Recital item number 100

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Drawing up a code of conduct

Recital item number 99

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Associations or other bodies

Recital item number 98

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing carried out by a public authority

Recital item number 97

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Consultation of the supervisory authority

Recital item number 96

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processor assisting the controller

Recital item number 95

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Mitigating risk with a data protection impact assessment

Recital item number 90

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Absence of safeguards

Recital item number 94

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Adoption of the Member State law

Recital item number 93

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Data protection impact assessment

Recital item number 92

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Large-scale processing operations

Recital item number 91

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Directive 95/46/EC

Recital item number 89

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Setting detailed rules concerning format and procedures

Recital item number 88

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Implementing appropriate technological protection and organisational measures

Recital item number 87

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Communicating to the data subject a personal data breach

Recital item number 86

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Physical, material or non-material damage to natural persons

Recital item number 85

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Maintaining security

Recital item number 83

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Enhancing compliance

Recital item number 84

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Ensuring compliance

Recital item number 81

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Demonstrating compliance

Recital item number 82

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Controller or a processor not established in the Union

Recital item number 80

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Protection of the rights and freedoms of data subjects

Recital item number 79

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Protection of the rights and freedoms of natural persons

Recital item number 78

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Implementation of appropriate measures and demonstration of compliance

Recital item number 77

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Severity of the risk to the rights and freedoms of the data subject

Recital item number 76

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The risk to the rights and freedoms of natural persons

Recital item number 75

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Responsibility and liability of the controller

Recital item number 74

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Restrictions concerning specific principles and the rights of information

Recital item number 73

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Profiling

Recital item number 72

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Data subject right not to be subject to a decision

Recital item number 71

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing for the purposes of direct marketing

Recital item number 70

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing being necessary for the performance of a task

Recital item number 69

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Strengthening the control over his or her own data

Recital item number 68

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Methods to restrict the processing of personal data

Recital item number 67

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Strengthen the right to be forgotten

Recital item number 66

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Data subject right to personal data rectification

Recital item number 65

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Reasonable measures to verify the identity of a data subject

Recital item number 64

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Data subject right of access to personal data

Recital item number 63

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Obligation to provide information

Recital item number 62

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Information in relation to the processing of personal data relating to the data subject

Recital item number 61

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The principles of fair and transparent processing

Recital item number 60

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Modalities facilitating the exercise of the data subject’s rights

Recital item number 59

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The principle of transparency

Recital item number 58

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Identifying a natural person

Recital item number 57

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing of personal data in the course of electoral activities

Recital item number 56

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing of personal data by official authorities

Recital item number 55

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Personal data public interest in the areas of public health

Recital item number 54

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Special categories of personal data which merit higher protection

Recital item number 53

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Derogating from the prohibition on processing special categories

Recital item number 52

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Personal data sensitivity

Recital item number 51

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing is compatible with the purposes for which the personal data was initially collected for

Recital item number 50

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Ensuring network and information security

Recital item number 49

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Legitimate interests of a controller

Recital item number 47

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Legitimate interest in transmitting personal data

Recital item number 48

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The processing of personal data should also be regarded to be lawful

Recital item number 46

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing should have a basis in Union or Member State law

Recital item number 45

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Entering into a contract

Recital item number 44

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Freely given consent

Recital item number 43

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Processing based on the data subject’s consent

Recital item number 42

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Legal basis or a legislative measure

Recital item number 41

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Personal data should be processed on the basis of the consent of the data subject

Recital item number 40

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Any processing of personal data should be lawful and fair

Recital item number 39

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Children merit specific protection

Recital item number 38

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Group of undertakings

Recital item number 37

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The main establishment of a controller

Recital item number 36

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Personal data concerning health

Recital item number 35

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Genetic data should be defined as personal data

Recital item number 34

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Not possible to fully identify the purpose

Recital item number 33

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Consent via a clear affirmative act

Recital item number 32

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

The protection of natural persons

Recital item number 31

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 16, 2019

Relationship with Directive 2002/58/EC

Article 95

eBOOK ● GDPR-CXI ● KNOWLEDGE BANK

July 15, 2019

Repeal of Directive 95/46/EC

Article 94

eBOOK ● GDPR-CXI ● KNOWLEDGE BANK

July 15, 2019

Committee procedure

Article 93

eBOOK ● GDPR-CX ● KNOWLEDGE BANK

July 15, 2019

Exercise of the delegation

Article 92

eBOOK ● GDPR-CX ● KNOWLEDGE BANK

July 15, 2019

Existing data protection rules of churches and religious associations

Article 91

eBOOK ● GDPR-CIX ● KNOWLEDGE BANK

July 15, 2019

Obligations of secrecy

Article 90

eBOOK ● GDPR-CIX ● KNOWLEDGE BANK

July 15, 2019

Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes

Article 89

eBOOK ● GDPR-CIX ● KNOWLEDGE BANK

July 15, 2019

Processing in the context of employment

Article 88

eBOOK ● GDPR-CIX ● KNOWLEDGE BANK

July 15, 2019

Processing of the national identification number

Article 87

eBOOK ● GDPR-CIX ● KNOWLEDGE BANK

July 15, 2019

Processing and public access to official documents

Article 86

eBOOK ● GDPR-CIX ● KNOWLEDGE BANK

July 15, 2019

Processing and freedom of expression and information

Article 85

eBOOK ● GDPR-CIX ● KNOWLEDGE BANK

July 15, 2019

Penalties

Article 84

eBOOK ● GDPR-CVIII ● KNOWLEDGE BANK

July 15, 2019

General conditions for imposing administrative fines

Article 83

eBOOK ● GDPR-CVIII ● KNOWLEDGE BANK

July 15, 2019

Online identifiers

Recital item number 30

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Right to compensation and liability

Article 82

eBOOK ● GDPR-CVIII ● KNOWLEDGE BANK

July 15, 2019

Pseudonymisation incentives

Recital item number 29

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Suspension of proceedings

Article 81

eBOOK ● GDPR-CVIII ● KNOWLEDGE BANK

July 15, 2019

Representation of data subjects

Article 80

eBOOK ● GDPR-CVIII ● KNOWLEDGE BANK

July 15, 2019

Right to an effective judicial remedy against a controller or processor

Article 79

eBOOK ● GDPR-CVIII ● KNOWLEDGE BANK

July 15, 2019

Right to an effective judicial remedy against a supervisory authority

Article 78

eBOOK ● GDPR-CVIII ● KNOWLEDGE BANK

July 15, 2019

Right to lodge a complaint with a supervisory authority

Article 77

eBOOK ● GDPR-CVIII ● KNOWLEDGE BANK

July 15, 2019

Pseudonymisation

Recital item number 28

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Confidentiality

Article 76

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Deceased persons

Recital item number 27

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Secretariat

Article 75

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Tasks of the Chair

Article 74

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Chair

Article 73

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Procedure

Article 72

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Reports

Article 71

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

GDPR should also apply to any information concerning an identifiable natural person

Recital item number 26

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Tasks of the Board

Article 70

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

GDPR should also apply to a controller not established in the Union

Recital item number 25

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Independence

Article 69

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

European Data Protection Board

Article 68

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Exchange of information

Article 67

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Urgency procedure

Article 66

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Processing of personal data not established in the Union

Recital item number 24

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Dispute resolution by the Board

Article 65

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Natural persons not being deprived of protection

Recital item number 23

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Opinion of the Board

Article 64

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Processing of personal data should be carried out in accordance with the GDPR

Recital item number 22

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Consistency mechanism

Article 63

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Joint operations of supervisory authorities

Article 62

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Directive 2000/31/EC

Recital item number 21

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Mutual assistance

Article 61

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Activities of courts and other judicial authorities

Recital item number 20

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Cooperation between the lead supervisory authority and the other supervisory authorities concerned

Article 60

eBOOK ● GDPR-CVII ● KNOWLEDGE BANK

July 15, 2019

Activity reports

Article 59

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

Processing of personal data by competent authorities

Recital item number 19

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Powers

Article 58

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

Tasks

Article 57

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

Competence of the lead supervisory authority

Article 56

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

Competence

Article 55

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

Rules on the establishment of the supervisory authority

Article 54

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

General conditions for the members of the supervisory authority

Article 53

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

Independence

Article 52

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

Supervisory authority

Article 51

eBOOK ● GDPR-CVI ● KNOWLEDGE BANK

July 15, 2019

Personal or household activity

Recital item number 18

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

Regulation (EC) No 45/2001

Recital item number 17

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 15, 2019

International cooperation for the protection of personal data

Article 50

eBOOK ● GDPR-CV ● KNOWLEDGE BANK

July 15, 2019

Activities which fall outside the scope of Union law

Recital item number 16

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Preventing a serious risk of circumvention

Recital item number 15

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Protection for natural persons whatever their nationality or place of residence

Recital item number 14

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Consistent levels of protection for natural persons

Recital item number 13

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Article 16(2) TFEU mandate

Recital item number 12

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Effective protection of personal data throughout the Union

Recital item number 11

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

High level of protection of natural persons

Recital item number 10

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Objectives and principles of Directive 95/46/EC

Recital item number 9

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Regulation provides for specifications or restrictions

Recital item number 8

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Data protection framework

Recital item number 7

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Technological developments and globalisation

Recital item number 6

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

The economic and social integration

Recital item number 5

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

The processing of personal data should be designed to serve mankind

Recital item number 4

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Directive 95/46/EC of the European Parliament and of the Council

Recital item number 3

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

The principles of, and rules on the protection of natural persons

Recital item number 2

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Derogations for specific situations

Article 49

eBOOK ● GDPR-CV ● KNOWLEDGE BANK

July 12, 2019

Binding corporate rules

Article 47

eBOOK ● GDPR-CV ● KNOWLEDGE BANK

July 12, 2019

Transfers or disclosures not authorised by Union law

Article 48

eBOOK ● GDPR-CV ● KNOWLEDGE BANK

July 12, 2019

Transfers subject to appropriate safeguards

Article 46

eBOOK ● GDPR-CV ● KNOWLEDGE BANK

July 12, 2019

Transfers on the basis of an adequacy decision

Article 45

eBOOK ● GDPR-CV ● KNOWLEDGE BANK

July 12, 2019

General principle for transfers

Article 44

eBOOK ● GDPR-CV ● KNOWLEDGE BANK

July 12, 2019

Certification bodies

Article 43

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Certification

Article 42

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Monitoring of approved codes of conduct

Article 41

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Codes of conduct

Article 40

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Tasks of the data protection officer

Article 39

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Position of the data protection officer

Article 38

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Designation of the data protection officer

Article 37

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Prior consultation

Article 36

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Data protection impact assessment

Article 35

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Communication of a personal data breach to the data subject

Article 34

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Notification of a personal data breach to the supervisory authority

Article 33

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Security of processing

Article 32

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Cooperation with the supervisory authority

Article 31

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Records of processing activities

Article 30

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Processing under the authority of the controller or processor

Article 29

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Processor

Article 28

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Representatives of controllers or processors not established in the Union

Article 27

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Joint controllers

Article 26

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Data protection by design and by default

Article 25

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Responsibility of the controller

Article 24

eBOOK ● GDPR-CIV ● KNOWLEDGE BANK

July 12, 2019

Restrictions

Article 23

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Automated individual decision-making, including profiling

Article 22

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Right to object

Article 21

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Right to data portability

Article 20

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Notification obligation regarding rectification or erasure of personal data or restriction of processing

Article 19

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Right to restriction of processing

Article 18

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Right to erasure (‘right to be forgotten’)

Article 17

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Right to rectification

Article 16

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Right of access by the data subject

Article 15

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

The protection of natural persons

Recital item number 1

eBOOK ● GDPR-RECITALS ● KNOWLEDGE BANK

July 12, 2019

Information to be provided where personal data have not been obtained from the data subject

Article 14

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Information to be provided where personal data are collected from the data subject

Article 13

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Transparent information, communication and modalities for the exercise of the rights of the data subject

Article 12

eBOOK ● GDPR-CIII ● KNOWLEDGE BANK

July 12, 2019

Processing which does not require identification

Article 11

eBOOK ● GDPR-CII ● KNOWLEDGE BANK

July 12, 2019

Processing of personal data relating to criminal convictions and offences

Article 10

eBOOK ● GDPR-CII ● KNOWLEDGE BANK

July 12, 2019

Processing of special categories of personal data

Article 9

eBOOK ● GDPR-CII ● KNOWLEDGE BANK

July 12, 2019

Conditions applicable to child’s consent in relation to information society services

Article 8

eBOOK ● GDPR-CII ● KNOWLEDGE BANK

July 12, 2019

Conditions for consent

Article 7

eBOOK ● GDPR-CII ● KNOWLEDGE BANK

July 12, 2019

Lawfulness of processing

Article 6

eBOOK ● GDPR-CII ● KNOWLEDGE BANK

July 12, 2019

Principles relating to processing of personal data

Article 5

eBOOK ● GDPR-CII ● KNOWLEDGE BANK

July 12, 2019

Definitions

Article 4

eBOOK ● GDPR-CI ● KNOWLEDGE BANK

July 12, 2019

Territorial scope

Article 3

eBOOK ● GDPR-CI ● KNOWLEDGE BANK

July 12, 2019

Relationship with previously concluded Agreements

Article 96

eBOOK ● GDPR-CXI ● KNOWLEDGE BANK

January 4, 2018

Commission reports

Article 97

eBOOK ● GDPR-CXI ● KNOWLEDGE BANK

January 3, 2018

Review of other Union legal acts on data protection

Article 98

eBOOK ● GDPR-CXI ● KNOWLEDGE BANK

January 2, 2018

Entry into force and application

Article 99

eBOOK ● GDPR-CXI ● KNOWLEDGE BANK

January 1, 2018

Material scope

Article 2

eBOOK ● GDPR-CI ● KNOWLEDGE BANK

January 2, 2000

Subject-Matter and Objectives

Article 1

eBOOK ● GDPR-CI ● KNOWLEDGE BANK

January 1, 2000

APP COMPLIANCE ● GDPR COMPLIANCE

©2007-2022 GDPA

SHARE YOUR KNOWLEDGE

Submit your article
Article will be submitted and published after review.

You are not allowed to submit content, please register or sign in.

Q: Will my membership with GDPA reduce my Insurance premium?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Will I get fined for non-compliance?

Let’s not kid ourselves, the biggest threat to organisations from GDPR is running the risk of massive fines.

In saying that, GDPR law is not about handing our fines, it’s about putting the rights of the individual first.

Before a fine is handed out, a serious of sanctions take place.

Whilst it may not be financial to begin with, it will definitely place a massive dent in the reputation of the offending party. When you lose the trust with your audience and/or your staff, it’s pretty much game over.

One thing is for certain, there is no room for complacency, not matter where in the world you are.

 question sent in by Zachary.T from Singapore

Q: Why isn’t GDPR Registrar a free service?

As much as we would like to make it a free platform, it would be beyond our personal financial ability in doing so.

We researched extensively to find the fair price medium, one that will make it a value added incentive on your behalf and one that would maintain the costs in operating and evolving this site.

Bottom line is we have settled on a pricing model for the many and not for the few.

question sent in by Joyce.T from Ireland

Q: Why are your membership prices so low?

Knowledge has no price limit and yes we could quite easily charge more.

The reason we don’t is simple. This platform has been designed to offer the tools to the many and not the few. We believe our pricing structure is fair and affordable to everyone, without compromising on our objectives to our members and to our purpose of existence.

If you wish to shout our team a cup of coffee then we won’t say no. Simply spin the wheel below to see how many of our staff will enjoy your shout.

So you know, its €1 per shout.

[wof_wheel id=”2854″]
 question sent in by Mo Chou from China

Q: Who does GDPR apply to?

GDPR applies to anyone that applies, handles, processes, and/or monitors personal data of residents (full-time or temporary including foreign tourists) within the European Union, no matter where in the world this activity is conducted from.

Furthermore, it matters not whether you hold onto the data for 1 minute or 10 years.

 question sent in by Andrea.F from Australia

Q: Who do GDPR privacy protocols apply to?

GDPR protocols apply to all forms of relationships where in concerns European Union Residents (full-time or temporary including foreign tourists).

The types of relationship fall under 3 categories:

✍ B2B (business to business) where third party relationships are involved in the processing of personal data.

✍ B2C (business to consumer) where you are required to demonstrate responsibility towards personal data.

✍ B2E (business to employee) where the data you hold on current, past and prospective employees is managed within the boundaries of GDPR protocols.

 question sent in by John.K from Belgium

Q: Who can I email?

To clear the air and any confusion, you can email both B2B (Business to Business) and B2C (Business to Consumer) based on the following parameters:

 B2B (Business to Business) in 5 steps

  1. Make sure the business you are targeting is relevant to your email.
  2. Define your legitimate interest when emailing them.
  3. Allow them to unsubscribe easily and/or to opt-out of future emails.
  4. Keep your database clean and up to date.
  5. Make sure the business email is not a personal name, example:
    • wrong: john@businessname.com (unless you have prior consent)
    • wrong: mary@businessname.com (unless you have prior consent)
    • right: info@businessname.com
    • right: support@businessname.com
    • right: contact@businessname.com
    • right: enquiry@businessname.com
    • right: hr@businessname.com
    • right: marketing@businessname.com
    • right: ceo@businessname.com
    • etc…

 B2C (Business to Consumer) in 5 steps

  1. Don’t pressure or confuse individuals to grant you consent by making it a pre-requisite for signing up to your site and/or service. Keep it simple and let them decide.
  2. Adjust your lead generation and consent forms, permitting the users to opt-in freely, be specific, keep it simple, and easy to understand.
  3. When collecting data for multiple marketing channels (sms, postal mail, email…) give the user the option to pick which channels they wish to receive communications from you. Provide separate options for each channel.
  4. Be clear with your audience should the information you collect from them is likely to be shared with 3rd parties.
  5. Allow them to unsubscribe easily and/or to opt-out of future emails.
question sent in by Nicole.D from Greece

Q: What rights will individuals have under privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: What responsibilities will companies have under the privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: What personal information can I ask for?

As a data subject (that’s how you are referred to), GDPR presents you with 8 rights to which you can make a specific request and be assured that your personal data is not being misused for purposes other than the legitimate purpose for which it was originally provided by you to the entity.

A data subject is referred to as an individual:

♀ ♂ Candidate
♀ ♂ Client
♀ ♂ Commuter
♀ ♂ Consumer
♀ ♂ Contractor
♀ ♂ Creditor
♀ ♂ Customer
♀ ♂ Debtor
♀ ♂ Employee
♀ ♂ End User
♀ ♂ Guest
♀ ♂ Individual
♀ ♂ Job Applicant
♀ ♂ Patron
♀ ♂ Prospect
♀ ♂ Purchaser
♀ ♂ Representative
♀ ♂ Tenant
♀ ♂ Tourist
♀ ♂ Vacationer
♀ ♂ Vendor
♀ ♂ Visitor

A data subject has 8 legal rights of request, including:

1: Right to Object:  The right to object to the processing of ♀ or ♂ personal data.

2: Right to be Forgotten: The right to ask for the deletion of ♀ or ♂ data, also referred to as the “right to erasure”.

3: Right to Access: The right to get access to ♀ or ♂ personal data that is being processed.

4: Right to Withdraw Consent: The right to withdraw a previously given consent for processing of ♀ or ♂ personal data for a purpose.

5: Right to Object to Automated Processing: The right to object to a decision based on automated processing including Machine Learning and Artificial Intelligence of ♀ or ♂ personal data.

6: Right to Rectification: The right to ask for modifications to ♀ or ♂ personal data in case the data subject believes that this personal data is not up to date or accurate.

7: Right to Data Portability: The right to ask for the transfer of ♀ or ♂ personal data in a machine-readable electronic format.

8: Right to Information: The right to ask a company for information about what ♀ or ♂ personal data is being processed and the reasoning for such processing.

This right given to you by GDPR is referred to as DSAR (Data Subject Access Request).

A DSAR can be made by an individual or an individual’s appointed representative. Such requests are made in writing and mailed to the entities registered GDPR Postal address and/or via Email.

Important to note that the violating entity must have a registered address within the EU to receive GDPR mail (irrelevant if the request is sent by post or via email).

question sent in by Angela.S from Greece

Q: What is the process for me to demonstrate that I comply with privacy laws such as the GDPR and how do I notify all my suppliers, customers, employees and stakeholders that I am complaint ?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: What is pseudonymization?

It’s when digitally stored data (information entered via a computer, mobile device, laptop, etc…) is encrypted in such a way where it makes it impossible for unauthorized people to trace it back to an individual.

The 5 key methods used to achieve pseudonymization are:

♒ Encryption (involving the rendering of the original data as unreadable and which cannot be rendered readable without an encryption key)

♒ Tokenization (involving the substitution of sensitive data elements with a non-sensitive elements, that hold no extrinsic or exploitable meaning or value)

♒ Blurring (involving obfuscation just like media outlets rendering the faces of anonymous sources unrecognizable)

♒ Masking (involving the masking of data where it still permits you to identify the data “example a credit card: XXXX XXXX XXXX 1964” without identifying the individual )

♒ Scrambling (involving a combination or obfuscation of alpha/numeric characters)

question sent in by Vincent.X from Sweden

Q: What is Personal Data?

Personal Data is any information relating to an identified or identifiable natural person (otherwise referred to as a ‘data subject’).

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifiers or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Here is an extensive list of Personal Data:

✍ Activity on the site
✍ Age
✍ Arrest records
✍ Bank account
✍ Bankruptcies
✍ Bio-metric identifiers
✍ Birth certificate
✍ Browser
✍ Browsing history (elsewhere online)
✍ Car insurance records
✍ Cell/Mobile phone
✍ Chat history (elsewhere online)
✍ Children’s names
✍ City of birth
✍ Cloud storage files
✍ Contacts list
✍ Cookies
✍ Credit card number
✍ Credit report
✍ Criminal offenses & convictions
✍ Current employer
✍ Current home address
✍ Current income
✍ Current location (physical)
✍ Daily life activities
✍ Date of birth
✍ Debit card number
✍ Device ID / MAC address
✍ Digital fingerprint
✍ Donations to organizations
✍ Driver’s license / state ID
✍ Education history
✍ Email records
✍ Employment history
✍ Event attendance
✍ Eye color
✍ Face photographs
✍ Facial geometry
✍ Family health history
✍ Fingerprints
✍ First name
✍ Friends’ names
✍ Gender
✍ Genetic information
✍ Hair color
✍ Handwriting
✍ Health insurance records
✍ Height
✍ Home phone
✍ Home value
✍ Homeowner status
✍ HR issues & disciplinary actions
✍ Income history
✍ Investment records
✍ IP address
✍ ISP (internet service provider)
✍ Judgements
✍ Language preference
✍ Last name
✍ Length of current residence
✍ Liens
✍ Life insurance records
✍ Likes & ratings
✍ Loan records
✍ Location history (physical)
✍ Maiden name
✍ Marital status
✍ Media preferences
✍ Medical card number
✍ Medical records
✍ Messages on the site
✍ Nationality
✍ Number of people in household
✍ Occupation
✍ Operating system
✍ Other financial statements
✍ Other identifying photographs
✍ Other names used
✍ Pardons
✍ Parents’ names
✍ Passport information
✍ Password
✍ Performance evaluations
✍ Personal email address
✍ Pets & animals
✍ Phone call records
✍ Photo location data
✍ Physical or mental disability
✍ PIN number
✍ Political affiliations & opinions
✍ Political party affiliation
✍ Postal activity
✍ Power of attorney
✍ Prescriptions
✍ Previous addresses
✍ Professional license records
✍ Property records
✍ Racial & ethnic origin
✍ Recreational license records
✍ Reference interviews
✍ Religion & philosophical beliefs
✍ Retina scan
✍ Schools attended
✍ Search history (elsewhere)
✍ Search history on the site
✍ Security question & answer
✍ Sexual orientation
✍ Sexual partners
✍ Shopping & purchase history (elsewhere online)
✍ Shopping & purchase history (offline)
✍ Shopping & purchase history (on the site)
✍ Siblings’ names
✍ Signature
✍ Social media accounts
✍ Social media posts & history
✍ Social security / social insurance number
✍ Spouse name
✍ Surveys (online)
✍ Surveys (offline)
✍ Tax file number
✍ Tax returns
✍ Text message history
✍ Third-party login
✍ Topics of interest
✍ Trade union membership
✍ Username
✍ Vehicle registration records
✍ Veteran status
✍ Video footage
✍ Voice recording
✍ Voice signature
✍ Voter registration records
✍ Website
✍ Weight
✍ Work address
✍ Work email address
✍ Work phone
✍ Writing sample (electronic)

list compiled by TIM BOUCHER
question sent in by Fei Hung from China

Q: What is GDPRs global reach?

The impact of GDPR is global.

GDPR is a legal chapter established by the European Union and affects directly any entity worldwide that that applies, handles, processes, and/or monitors personal data of residents (full-time or temporary including foreign tourists) within the European Union, no matter where in the world this activity is conducted from. Simply put, you cannot hide from it or avoid it.

Currently, over 23,000,000 companies worldwide in 191 countries conduct some form of business activity which involves European Union residents. Chances are you’re one of these companies.

Here are the 3 key questions you need to immediately ask yourself:

  1. Do you have a registered mailing address within the European Union for all your GDPR related matters?
  2. Do you have someone with exceptional GDPR knowledge and data protection experience within the European Union to be your first line of contact regarding GDPR related matters?
  3. Have you taken the first basic steps towards GDPR compliance?

If you answered NO to any one of the 3 questions then we can assist you. GDPR Registrar is designed to provide the platform for entities such as yourself to commit to compliance and to be registered & represented within the European Union as required by law.

For further details CLICK HERE.

question sent in by Theresa.C from Dubai

Q: What is biometrics?

Biometrics is the measurement and statistical analysis of people’s unique physical and behavioral characteristics. The technology is mainly used for identification and access control, or for identifying individuals who are under surveillance.

The basic premise of biometric authentication is that every person can be accurately identified by his or her intrinsic physical or behavioral traits.

Biometric identifiers are divided into 2 categories, Behavioral and Physiological.

♀♂Behavioral characteristics are related to the pattern of behavior of a person, including but not limited to typing rhythm, gait, and voice, otherwise referred to as behaviometrics.

♀♂Physiological characteristics are related to the shape of the body, including but not limited to fingerprint, palm veins, face recognition, DNA, palm print, hand geometry, iris recognition, retina and odor and/or scent.

Examples of biometrics include token-based identification systems, such as a driver’s license or passport, and knowledge-based identification systems, such as a password or personal identification number.

Since biometric identifiers are unique to individuals, they are more reliable in verifying identity than token and knowledge-based methods; however, the collection of biometric identifiers raises privacy concerns about the ultimate use of this information.

question sent in by Marylin.S from Canada

Q: What information can’t I ask for?

You don’t have the right to make a request and gain access to the information of a 3rd party individual, unless you have been properly appointed as the authorized representative of the original individual seeking access to their information.

The entity receiving your request requires:

  1. sufficient evidence on your behalf to verify the identity of the data subject making such a request and
  2. sufficient details on your behalf so it can locate your request.

If the responsible person refuses your Data Subject Access Request on behalf of the entity, they must clearly set out in writing the reasons for the rejection.

If you are not satisfied with the outcome of your request, then you have the right to ask the entity for the details to their independent DPO (Data Protection Officer) to review your case.

question sent in by Frank.A from UK

Q: What if we cannot afford the costs to comply?

One thing people forget, and we wish to make this very clear, especially for small to medium size businesses. GDPR is not designed to put you out of business!!! 

GDPR requires you to DEMONSTRATE that you are committed in working towards being compliant.

Don’t act from a position of fear, that’s the biggest and most costly mistake you’ll make.

Do yourself a favor:

  1. Take a step back.
  2. Take a deep breath.
  3. Take a structured approach towards compliance.

When you register for free with us, we’ll give you your free step-by-step plan of action. CLICK HERE TO REGISTER FOR FREE .

We’re not going to lie to you, once you have gone through the plan, you will most likely become a registered member with us and/or with another quality organization for reasons that will become clear to you.

question sent in by Mario.D from Italy

Q: What does GDPR mean for social media strategies?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: What does GDPR and privacy laws mean for property marketers?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: What do you need to do if you own or manage property?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: What do you do with my information?

We use your information in fulfilling our obligations to you as a member and as permitted to us via GDPR Article 6 “Lawfulness of Processing”, where the processing shall be lawful only if and to the extent that at least one of the following applies:

✍ the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

✍ processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

✍ processing is necessary for compliance with a legal obligation to which the controller is subject;

✍ processing is necessary in order to protect the vital interests of the data subject or of another natural person;

✍ processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

✍ processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. (shall not apply to processing carried out by public authorities in the performance of their tasks.)

We don’t abuse, take unlawful advantage or compromise your trust when you provide your information to us, and as such:

☑ We don’t share your information with 3rd parties, unless it is required to complete your request. (One example is when you file a complaint against a third party via our platform, we may be required to share your information with relevant 3rd parties to address your DSAR complaint.)

☑ We don’t sell your information to 3rd parties, period!

☑ We don’t ask or gather irrelevant information from you just for the hell of it.

☑ We don’t hold onto your credit-card information and will never ask for your credit card details. (All payments made by you to us will be via Paypal or Stripe gateways or Direct Bank Transfer.)

☑ We don’t make deliberate errors, therefore if you find something on our site not to be right, feel free to tell us and we’ll address it.

☑ We don’t proclaim to be perfect, though perfection is something we continually strive for.

☑ We don’t display your personal name on our site publicly unless you have given us explicit consent.

☑ We don’t share your details with co-workers within our organization unless they have a legitimate interest within their role.

☑ We don’t store your information on physical servers outside of the European Union.

☑ We don’t spam!

☑ We don’t work with entities that do not comply to GDPR Regulations.

question sent in by Elizabeth.B from UK

Q: What do we need to understand about GDPR?

As someone that handles personal data of residents (full-time or temporary including foreign tourists) within the European Union, you need to:

☑ Fully understand on how you use your data.

☑ Make certain that you’re incorporating GDPR into your data management.

☑ Conduct a thorough evaluation of your current & future data requirements.

☑ Assess the capabilities in managing such data.

☑ Be prepared to execute major changes in how you manage your data.

question sent in by David.M from Hong Kong

Q: What do I need to keep in mind about GDPR?

The top 12 key factors to keep in mind about GDPR protocols regrading European Union Residents (EURs) (full-time or temporary including foreign tourists) within the European Union, no matter where in the world this activity is conducted from include:

☑ Handling data on EURs.

☑ Offering goods and/or services to EURs.

☑ Monitoring and/or tracking the activities of EURs.

☑ Conducting any form of business or commercial activities with EURs.

☑ How serious you are about doing the right thing with EURs data.

☑ How you store EURs data.

☑ How you process EURs data.

☑ How you access EURs data.

☑ How you transfer EURs data.

☑ How you disclose EURs data.

☑ How you interact with EURs data.

☑ How you react to an infringement on EURs data.

question sent in by Patricia.Z from Hong Kong

Q: What are the principles of GDPR based on?

The principles are based on entities being responsible in considering what accountability they may or may not need to comply with. This is strictly based on the unique and specific circumstances of their activities and how they utilize the data they receive.

Each entities principles of compliance will differ according to interpretation and circumstances. The core principle is being able to demonstrate that you are committed to GDPR Compliance and are being proactive in achieving this target, whilst being able to demonstrate it when required.

Taking this approach will direct you in the right direction towards compliance.

 question sent in by Frances.R from USA

Q: What are cookies?

Cookies are small pieces of data stored on a user’s device which allow websites to perform specified actions or preferences.

Cookies are divided 5 categories:

☀ Targeted Cookies: Used to deliver multiple types of targeted digital ads. They store your user data and behavioral information, allowing advertising services to target you within specified audience groups according to variables including but not limited to: ✍age ✍gender ✍location ✍personal interests ✍website habits ✍search engine habits ✍social media habits, just to name a few.

☀ Necessary Cookies: Used by a website to deliver you the information and services they offer in a secure and optimized manner. In most cases, you must accept these “necessary cookies” to be able to make use of their online systems.

☀ Functional Cookies: They are essential for a website to work, for example: ✍making sure that you don’t have to keep logging into the website each time you visit a different page ✍keeping track of your shopping cart on the website ✍making sure the online live support maintains contact with you, especially when navigating the site.

☀ Performance Cookies: Used for internal purposes to help the website in providing you with a better user experience. The cookies help the operators of the website to better understand how it’s used by visitors, shoppers and members. From this information they can improve the way the site works and deliver better content to you. One example is when they use an external company such as Google to perform such an analysis via their services. In this instance, they may set third party cookies to enable this to function correctly.

☀ Undefined Cookies: This is something of a hit and miss scenario as undefined cookies can come from a number of factors including your personal settings on your device.

You can always run a check as to what cookies a website uses via online tools such as COOKIE METRIX or COOKIEBOT

question sent in by Mandy.Y from Cyprus

Q: My business collects personal information through electronic platfoms such as text messages. Do I need to comply with privacy laws such as GDPR

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Is photography subject to GDPR regulations?

Yes, photography is subject to the GDPR regulations.

You’ll need to have a privacy policy in place and you’ll need to make sure it’s in line with GDPR.

Make sure you have the privacy policy linked to your online pages, including website/s and social pages.

question sent in by Joshua.H from Germany

Q: Is GDPR just a fad?

Once upon a time there were only 2 things certain in life & now there are 3.

The sooner you come to grips with GDPR, the better of you’ll be in the long run.

  1. Define your policies for GDPR compliance
  2. Define your processes for GDPR compliance.
  3. Define your stakeholders for GDPR compliance.
  4. Discover what data you need to protect and manage.
  5. Control the access to your data.
  6. Centralize your data across your organization.

Following these six steps will place you in good standing with GDPR protocols, setting your path towards a bright future with your audience.

Forget bitcoin, trust is the new currency of the future!

question sent in by Beth.V from UK

Q: If my EU representative is based in the UK will I be compliant after Brexit or do I need to nominate a representative outside the UK

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: If I’m just a social network user do I need to comply with privacy laws and what are the consequences if I don’t?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: If I have an Instagram account do I need to comply with data protection privacy laws

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: If I have a facebook business page do I need to be GDPR compliant?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I’m just a sole trader who employs contractors from time to time. Do I need to comply with privacy regulations such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I’m a trades person and often take before and after shots of the work I do. Do I need to comply with privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I’m a marketer who advertises products and services and receives enquiries. Do I need to comply with privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I’m a consumer, how do I know that my personal information is protected?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I’m a business that wants to comply and implement data privacy and protection best practice and I don’t know how to do it. Who will help me do this

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I’m a business that buys and sells products and services on Ebay. Do I need to comply with privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I’m a business in Australia that orders parts and services from Europe. Do I need to comply with privacy laws such as the GDPR ?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I have a You tube account, Im a you tube user, post videos, music and other information. Do I need to comply with Privacy Regulations such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: I have a data base of past customers and enquiries. Can I keep this data base on file?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: How will GDPR and other Privacy laws affect Property managers and Agents?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: How long can someone hold onto my data for?

When it’s for contractual reasons, for example you purchased a product, service, made a donation and actions of similar nature, it generally ranges about 6-7 years.

It’s always good to reach out to the entity to clarify this for you. You’ll find that the majority of companies will be more than happy to answer your question. Keep in mind that they have 30 days to respond to you.

If they don’t, then you can file an official complaint via our online form FILE A COMPLAINT. This service is also part of our free membership.

Here is a great infograph from Erik Underwood c/o TechRepublic, with interesting insights into why your data is being collected.

question sent in by Anna.A from Spain

Q: How does someone get fined outside of the EU?

Article 27 of the GDPR is the first line of defense. It requires companies without operations in the EU to appoint an EU representative. If that doesn’t happen, non-EU companies will be perused via local enforcement actions within their country via mutual legal assistance treaties (MLAT), and private prosecutions under similar local laws.

 question sent in by Claire.M from Taiwan

Q: How does GDPR affect social media advertising

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: How do I process and file personal information that I receive over Text messages in order to be compliant with privacy laws such as the GDPR

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Does SMS marketing need to comply with privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Does my Australian business need to be GDPR compliant?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Do non EU entities have to comply to GDPR?

Yes, Non EU Entities have to comply the moment they apply, handle, process, and/or monitor personal data of residents (full-time or temporary including foreign tourists) within the European Union.

Furthermore, it matters not whether you hold onto the data for 1 minute or 10 years.

 question sent in by John.K from Taiwan

Q: Do I need to train my staff?

The logical answer is yes you do, as they are your controllers and processors of the information you receive. Furthermore it matters not whether you are a small family business or a large organization,

The purpose of a certification is to develop a code-of-conduct for your staff to follow, which in return helps them understand the requirements and actions needed in being compliant.

Richard Branson said it best:  “Customers come second, employees first. It’s a philosophy that brings unexpected benefits to both the company and its clients.”

 question sent in by Konstantinos.M from Greece

Q: Do I have rights under the privacy act when I use social networking sites?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Do all organization now need to appoint a Data Protection Officer in order to comply with Privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Can I keep my customers details on file once our transaction has completed?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Can I get insurance against Data breaches?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Can I cancel my membership at any time

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Can a Controller or Processor be fined?

The short answer is yes.

In saying that, a monetary fine is only one of the corrective measures included in the GDPR to apply pressure on controllers and processors to comply with the regulation.

Not all violations will result in a monetary fines, and not all fines will be based on the maximum amount, though rest assured it won’t be pocket change either.

A monetary fine is the last step in a long process designed to address the scope of an infringement by a Controller and/or Processor, concurrently assessing on how the organization allowed the infringement to happen in the first place and to monitor what steps have been taken to address the violation and any further violations.

 question sent in by Victoria.F from Germany

Q: As an employee or contractor what rights do I have under privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: As a career working in the aged care, disability and child support sector. Do I need to comply with privacy laws such as the GDPR?

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Q: Are Photographs, videos & audio considered personal data

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

GDPA VIDEO CONFERENCING

OVERVIEW

For us at GDPA, providing you a conference platform you can rely on is the most important thing. That means, amongst other things, we are very mindful of the security and privacy aspects that affect our users.

Security and privacy are very broad topics so we are going to try and go through some practical use cases to demonstrate what’s at play.

Fully secure you say… What does this mean exactly?

In many respects meetings are simply private by design.

To begin with, all meeting rooms are ephemeral: they only exist while the meeting is actually taking place.

They get created when the first participant joins and they are destroyed when the last one leaves. If someone joins the same room again, a brand new meeting is created with the same name and there is no connection to any previous meeting that might have been held with the same name.

This is all very important. Some of the systems that let people “pre-create” rooms, have subtle indications that let a potential attacker distinguish reserved from unreserved meetings which then makes the reserved meetings easier to identify and target.

That said, since a name is all that one needs to actually access a room, we have to be really careful about how we choose them. We don’t want others accidentally stumbling into your meetings, just as we want to keep pranksters and snoopers away. Therefore you simply create a unique name for your conference or use our random code generator below. Once created, it’s what you will share with the people you want to participate.

If you start a meeting with the name “Test”, “Demo” or “Family” for example, chances of having some random uninvited people joining are very, very high. How does one pick a good room name then? Our random meeting name generator below is a great start. It offers names that are easy to remember and read out loud on a phone call, and come from a set of over a trillion possible combinations. Picking out one of the auto-generated names is therefore quite safe.

COPY & SHARE YOUR UNIQUE CONFERENCE CODE
https://meet.jit.si/

If entering via Web Browser then share/use the full link: https://meet.jit.si/#########

If entering via GDPA Video Conferencing then share/use the 9 digits: #########