Under the General Data Protection Regulation (GDPR), it is necessary for the controller of personal data to determine the legal basis for each purpose of data processing carried out under its responsibility (i.e. data processing carried out either by itself
Data protection by design and by default
Data Protection by design and by default are principles defined in article 25 of the general data protection regulation (GDPR). Data protection by design requires the controller to take technical and organisational measures to implement the data protection principles effectively and
The Privacy Principles
Under the EU general data protection regulation (GDPR), any data processing activities must be compliant with six privacy principles, which are the cornerstone of the european privacy regulation and most international privacy laws. Being familiar with the privacy principles also
Controller or Processor?
Where more than one party is involved in personal data processing operations, the first question to answer is: are they acting as a controller or a processor? Indeed, depending on the role of the parties (i.e. controller or processor), their obligations
Does GDPR apply to your business?
The territorial scope of the new data protection regulation applicable from May 2018 (GDPR) is much wider than the one of the current directive 95/46/CE. As a consequence, the new data protection rules may apply to any business whether or