Guide to the General Data Protection Regulation (GDPR)

Description

What's new We have expanded the page on the right to data portability. What is personal data? The GDPR applies to the processing of personal data that is: Are we a joint controller? (no equivalent) Accountability principle What is fairness? obligations, rather than through registration with the ICO. So you should identify the minimum amount of personal data you need to fulfil your purpose. You should Does personal data always have to be up to date? In brief Accountability principle Lawful basis for processing In brief Recording consent It does not apply if you need to process one person's details but the contract is with someone else. Article 6(3) requires that the legal obligation must be laid down by UK or EU law. Recital 41 confirms that What are 'vital interests'? data. In brief In brief also need to comply with Article 10. Right to be informed ☐ The lawful basis for the processing. Other information When is data inaccurate? How does the right to erasure apply to data collected from children? In brief What does the right apply to? What is the right to object? Solely automated individual decision-making, including profiling with legal or similarly In brief In brief In brief In brief DPIA screening checklist In brief Why sign up to a code of conduct? 25(3)); Security In brief Encryption and data storage Although the GDPR does not define what is 'appropriate', it does provide further considerations in Article In brief In brief The 'domestic purposes' exemption in the 1998 Act is not replicated. This is because the GDPR does not have their immigration applications reviewed and to submit an appeal against an asylum decision or a