Recital 50 – Further processing of personal data
Recital 50 Further processing of personal data The processing of personal data for purposes other than those for which the personal data were initially collected should be allowed only…
Author: Ben Wolford
Recital 51 – Protecting sensitive personal data
Recital 51 Protecting sensitive personal data Personal data which are, by their nature, particularly sensitive in relation to fundamental rights and freedoms merit specific protection as the context of…
Recital 52 – Exceptions to the prohibition on processing special categories of personal data
Recital 52 Exceptions to the prohibition on processing special categories of personal data Derogating from the prohibition on processing special categories of personal data should also be allowed when…
Recital 53 – Processing of sensitive data in health and social sector
Recital 53 Processing of sensitive data in health and social sector Special categories of personal data which merit higher protection should be processed for health-related purposes only where necessary…
Recital 54 – Processing of sensitive data in public health sector
Recital 54 Processing of sensitive data in public health sector The processing of special categories of personal data may be necessary for reasons of public interest in the areas…
Recital 55 – Public interest in processing by official authorities for objectives of recognized religious communities
Recital 55Public interest in processing by official authorities for objectives of recognized religious communities Moreover, the processing of personal data by official authorities for the purpose of achieving the…
Recital 56 – Processing personal data on people’s political opinions by parties
Recital 56Processing personal data on people’s political opinions by parties Where in the course of electoral activities, the operation of the democratic system in a Member State requires that…
Recital 57 – Additional data for identification purposes
Recital 57 Additional data for identification purposes If the personal data processed by a controller do not permit the controller to identify a natural person, the data controller should…
Recital 58 – The principle of transparency
Recital 58 The principle of transparency The principle of transparency requires that any information addressed to the public or to the data subject be concise, easily accessible and easy…
Recital 59 – Procedures for the exercise of the rights of the data subjects
Recital 59 Procedures for the exercise of the rights of the data subjects Modalities should be provided for facilitating the exercise of the data subject’s rights under this Regulation,…
Recital 60 – Information obligation
Recital 60 Information obligation The principles of fair and transparent processing require that the data subject be informed of the existence of the processing operation and its purposes. The…
Recital 61 – Time of information
Recital 61 Time of information The information in relation to the processing of personal data relating to the data subject should be given to him or her at the…
Recital 22 – Processing by an establishment
Recital 22 Processing by an establishment Any processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union…
Recital 29 – Pseudonymisation at the same controller
Recital 29 Pseudonymisation at the same controller In order to create incentives to apply pseudonymisation when processing personal data, measures of pseudonymisation should, whilst allowing general analysis, be possible…
Recital 30 – Online identifiers for profiling and identification
Recital 30 Online identifiers for profiling and identification Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses,…
Recital 31 – Not applicable to public authorities in connection with their official tasks
Recital 31 Not applicable to public authorities in connection with their official tasks Public authorities to which personal data are disclosed in accordance with a legal obligation for the…
Recital 32 – Conditions for consent
Recital 32 Conditions for consent Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to…
Recital 33 – Consent to certain areas of scientific research
Recital 33 Consent to certain areas of scientific research It is often not possible to fully identify the purpose of personal data processing for scientific research purposes at the…
Recital 34 – Genetic data
Recital 34Genetic data Genetic data should be defined as personal data relating to the inherited or acquired genetic characteristics of a natural person which result from the analysis of…
Recital 35 – Health data
Recital 35 Health data Personal data concerning health should include all data pertaining to the health status of a data subject which reveal information relating to the past, current…
Recital 36 – Determination of the main establishment
Recital 36 Determination of the main establishment The main establishment of a controller in the Union should be the place of its central administration in the Union, unless the…
Recital 37 – Enterprise group
Recital 37 Enterprise group A group of undertakings should cover a controlling undertaking and its controlled undertakings, whereby the controlling undertaking should be the undertaking which can exert a…
Recital 38 – Special protection of children’s personal data
Recital 38 Special protection of children’s personal data Children merit specific protection with regard to their personal data, as they may be less aware of the risks, consequences and…
Recital 39 – Principles of data processing
Recital 39 Principles of data processing Any processing of personal data should be lawful and fair. It should be transparent to natural persons that personal data concerning them are…
Recital 40 – Lawfulness of data processing
Recital 40Lawfulness of data processing In order for processing to be lawful, personal data should be processed on the basis of the consent of the data subject concerned or…
