Data Processing Agreements must be in writing
Data processing agreements must be in writing in order to be valid under the GDPR. It is clear from Article 28(3) of the GDPR
Data Processing Agreements must be in writing Read Post »
Measures
More
Supervising artificial intelligence
The role of data protection authorities in supervising artificial intelligence should be central according to EDPB.
Supervising artificial intelligence Read Post »
Decisions
Use of facial recognition at airports
The European Data Protection Board (EDPB) noted that the use of facial recognition at airports may meet the requirements of the GDPR
Use of facial recognition at airports Read Post »
Decisions
Processed personal data for an indefinite period
A company in Finland had to pay a fine of almost one million euros. They processed personal data for an indefinite period.
Processed personal data for an indefinite period Read Post »
Decisions
The Court of Justice of the European Union’s position on damages
The Court of Justice of the European Union’s position on damages in the event of personal data breaches is that it is possible
The Court of Justice of the European Union’s position on damages Read Post »
Decisions
Breach of GDPR rules when processing children’s personal data
One company was in breach of GDPR rules when processing children’s personal data and therefore had to pay several hundred million euros
Breach of GDPR rules when processing children’s personal data Read Post »
Data Subject Rights
Proof of identity when data subjects wish to exercise a right
Companies are allowed to request more information for proof of identity when data subjects wish to exercise a right under the GDPR.
Proof of identity when data subjects wish to exercise a right Read Post »
Data Subject Rights
Deadline for responding to and fulfilling a right
There is a deadline for responding to and fulfilling a right that data subjects have under the GDPR. There are eight (8) fundamental rights
Deadline for responding to and fulfilling a right Read Post »
Legal Basis
Companies that process personal data must be transparent
Companies that process personal data must be transparent towards the data subjects and inform them about the processing.
Companies that process personal data must be transparent Read Post »
More
SPE has developed a tool for auditing websites
The EDPB Support Pool of Experts (SPE) has developed a tool for auditing websites that are good for companies to use.
SPE has developed a tool for auditing websites Read Post »