Search results

doctor. Lisa tells him all the details about a rash in an intimate area. The next day a friend of Lisa asks her about her rash. It turns out that the doctor

Article 8(2) CFR. A data subject may just want to get information about the data processed about him or her - independent of the exercise of any other right

must be informed about it. More particularly, the controller is under the duty to provide the data subject with "meaningful information about the logic involved"

guiding questions: Where are decisions about the purposes and means of the finally signed off’? Where are decisions about business activities that involve data

reduce that age limit to below 13. There is currently no rule in the GDPR about the age for consent if no "information society service" is involved, including

subject about the "action taken" following receipt of a request under Articles 15 to 22 GDPR. The wording of the law only requires an information about the

Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences

7(2) applies when data subjects and controllers communicate in written form about “other matters”, such as a longer contract, sign-up form and alike. In such

In both cases, it is argued, the information reveals something sensitive about the individual (either their political views, or a health condition) and

life. Results may vary from case to case, but when the data is about a public figure or about the professional life of a well-know individual, the argument

establishment: Where are decisions about the purposes and means of the processing given final “sign off”? Where are decisions about business activities that involve

responsibilities on a long-term and strategic basis. Further information about the ICO's decision making structure can be found here. When the General Data

Paragraph 4 reiterates the obligation on the data controller to inform about the existence of the right to object at the time of the first communication

accordance with Article 58(1)(d) GDPR, a SA can inform a controller or processor about an alleged – i.e. possible, but not yet determined – infringement of the

authority. Paragraph 4 grants controllers the possibility of sharing details about the breach in different phases when all the information cannot be provided

employee decided on behalf of the head of the DSB. There is no information about individual sections within the DSB. The DSB followed the previous "Datenschutzkommission"

individuals and society when state, social or economic power obtains knowledge about people in an uncontrolled and asymmetrical manner. At the same time, only

lead to the rejection of a required loan. In many cases false information about a data subject can also lead to severe emotional distress. Example: A pregnant

provisions is not mandatory, as the data subject may be not knowledgeable about the law and its technicalities. In theory, the controller could also be omitted

entities to gather unthinkable amounts of information about other people and entities. Information about a person usually allows to manipulate individual decision