Search results

general data protection principles, in particular purpose limitation, data minimisation, limited storage periods, data quality, data protection by design

identify your data") do not meet the requirement of a proper demonstration under the fairness and transparency principle (Article 5(1)(a) GDPR). Article 11(2)

establishment or in which a significant number of data subjects are substantially affected by the processing. According to Article 62(2) GDPR, “a supervisory authority

to carry out a data protection impact assessment from Article 35 GDPR or the obligation to designate a data protection officer from Article 37 GDPR. The

under Article 71 GDPR. The report is not designed to simply act as a summary of the EDPB’s activities, but rather a status report on data protection in the

consequently the effectiveness of data protection. The second is to act as a minimum barrier against appointments of a purely political nature, without

mechanisms for certification; the adequate level of protection afforded by a third country, a territory or a specified sector within that third country, or

organisation of the National Data Protection Commission and the general data protection framework; the Act of 1 August 2018 on the protection of individuals with

purpose of the restriction” (Article 23(2)(h)), could be fulfilled via a general data protection notice. As a general rule, data subjects should be informed

General Data Protection Regulation (GDPR): A Commentary, Article 36 GDPR, p. 684 (Oxford University Press 2020). Kelleher & Murray, EU Data Protection Law

2016/679 that where a data subject becomes a party to proceedings under Article 78(1) as a result of a data controller appealing against a supervisory authority’s

proceedings. Article 81 GDPR regulates the suspension of judicial proceedings in multiple Member States in the context of data protection. The Article addresses

Procedural Act (Zákon č. 71/1967 Zb. o správnom konaní – Správny poriadok) unless the GDPR or the Slovak Data Protection Act (Zákon č. 18/2018 o ochrane

under Article 30(1) GDPR, documenting personal data breaches under Article 33(5) GDPR or performing a data protection impact assessment under Article 35 GDPR)

Economic Area), and Article 69 GDPR (on the independence of the European Data Protection Board ("EDPB")). Article 52(1) GDPR acts as a catch-all clause that

compliance for the new data controller. A data portability request only applies to personal data concerning the data subject. Pseudonymous data is within the scope

the implementation of general data protection principles (Article 5), determination of the legal basis for processing (Article 6), implementation of security

please refer to Article 52 GDPR. Hijmans, in Kuner, Bygrave, Docksey, The EU General Data Protection Regulation (GDPR): A Commentary, Article 54 GDPR, page

element of a data subject's fundamental right to data protection. Article 51 GDPR is closely connected to Article 4(21) (definition of SA), Article 52 (independence)

appointment of a Data Protection Officer (DPO) to supervise the processing of the personal data, the obligation to conduct a Data Protection Impact Assessment