Month: November 2018

Recital 75 – Risks to the rights and freedoms of natural persons

Recital 75Risks to the rights and freedoms of natural persons The risk to the rights and freedoms of natural persons, of varying likelihood and severity, may result from personal…

Read more 0 comments

Recital 76 – Risk assessment

Recital 76Risk assessment 1The likelihood and severity of the risk to the rights and freedoms of the data subject should be determined by reference to the nature, scope, context…

Read more 0 comments

Recital 77 – Risk assessment guidelines

Recital 77Risk assessment guidelines 1Guidance on the implementation of appropriate measures and on the demonstration of compliance by the controller or the processor, especially as regards the identification of…

Read more 0 comments

Recital 78 – Appropriate technical and organisational measures

Recital 78Appropriate technical and organisational measures 1The protection of the rights and freedoms of natural persons with regard to the processing of personal data require that appropriate technical and…

Read more 0 comments

Recital 79 – Allocation of the responsibilities

Recital 79Allocation of the responsibilities The protection of the rights and freedoms of data subjects as well as the responsibility and liability of controllers and processors, also in relation…

Read more 0 comments

Recital 80 – Designation of a representative

Recital 80Designation of a representative 1Where a controller or a processor not established in the Union is processing personal data of data subjects who are in the Union whose…

Read more 0 comments

Recital 81 – The use of processors

Recital 81The use of processors 1To ensure compliance with the requirements of this Regulation in respect of the processing to be carried out by the processor on behalf of…

Read more 0 comments

Recital 43 – Freely given consent

Recital 43Freely given consent 1In order to ensure that consent is freely given, consent should not provide a valid legal ground for the processing of personal data in a…

Read more 0 comments

Recital 44 – Performance of a contract

Recital 44Performance of a contract Processing should be lawful where it is necessary in the context of a contract or the intention to enter into a contract.

Read more 0 comments

Recital 45 – Fulfillment of legal obligations

Recital 45Fulfillment of legal obligations 1Where processing is carried out in accordance with a legal obligation to which the controller is subject or where processing is necessary for the…

Read more 0 comments

Recital 46 – Vital interests of the data subject

Recital 46Vital interests of the data subject 1The processing of personal data should also be regarded to be lawful where it is necessary to protect an interest which is…

Read more 0 comments

Recital 47 – Overriding legitimate interest

Recital 47Overriding legitimate interest 1The legitimate interests of a controller, including those of a controller to which the personal data may be disclosed, or of a third party, may…

Read more 0 comments

Recital 48 – Overriding legitimate interest within group of undertakings

Recital 48Overriding legitimate interest within group of undertakings 1Controllers that are part of a group of undertakings or institutions affiliated to a central body may have a legitimate interest…

Read more 0 comments

Recital 49 – Network and information security as overriding legitimate interest

Recital 49Network and information security as overriding legitimate interest 1The processing of personal data to the extent strictly necessary and proportionate for the purposes of ensuring network and information…

Read more 0 comments

Recital 50 – Further processing of personal data

Recital 50Further processing of personal data 1The processing of personal data for purposes other than those for which the personal data were initially collected should be allowed only where…

Read more 0 comments

Recital 51 – Protecting sensitive personal data

Recital 51Protecting sensitive personal data 1Personal data which are, by their nature, particularly sensitive in relation to fundamental rights and freedoms merit specific protection as the context of their…

Read more 0 comments

Recital 52 – Exceptions to the prohibition on processing special categories of personal data

Recital 52Exceptions to the prohibition on processing special categories of personal data 1Derogating from the prohibition on processing special categories of personal data should also be allowed when provided…

Read more 0 comments

Recital 53 – Processing of sensitive data in health and social sector

Recital 53Processing of sensitive data in health and social sector 1Special categories of personal data which merit higher protection should be processed for health-related purposes only where necessary to…

Read more 0 comments

Recital 54 – Processing of sensitive data in public health sector

Recital 54Processing of sensitive data in public health sector 1The processing of special categories of personal data may be necessary for reasons of public interest in the areas of…

Read more 0 comments

Recital 55 – Public interest in processing by official authorities for objectives of recognized religious communities

Recital 55Public interest in processing by official authorities for objectives of recognized religious communities Moreover, the processing of personal data by official authorities for the purpose of achieving the…

Read more 0 comments

Recital 56 – Processing personal data on people’s political opinions by parties

Recital 56Processing personal data on people’s political opinions by parties Where in the course of electoral activities, the operation of the democratic system in a Member State requires that…

Read more 0 comments

Recital 57 – Additional data for identification purposes

Recital 57Additional data for identification purposes 1If the personal data processed by a controller do not permit the controller to identify a natural person, the data controller should not…

Read more 0 comments

Recital 58 – The principle of transparency

Recital 58The principle of transparency 1The principle of transparency requires that any information addressed to the public or to the data subject be concise, easily accessible and easy to…

Read more 0 comments

Recital 59 – Procedures for the exercise of the rights of the data subjects

Recital 59Procedures for the exercise of the rights of the data subjects 1Modalities should be provided for facilitating the exercise of the data subject’s rights under this Regulation, including…

Read more 0 comments

Recital 60 – Information obligation

Recital 60Information obligation 1The principles of fair and transparent processing require that the data subject be informed of the existence of the processing operation and its purposes. 2The controller…

Read more 0 comments