Guide to the General Data Protection Regulation (GDPR)

What's new
We have expanded the page on the right to data portability.
What is personal data?
The GDPR applies to the processing of personal data that is:
Are we a joint controller?
(no equivalent) Accountability principle
What is fairness?
obligations, rather than through registration with the ICO.
So you should identify the minimum amount of personal data you need to fulfil your purpose. You should
Does personal data always have to be up to date?
In brief
Accountability principle
Lawful basis for processing
In brief
Recording consent
It does not apply if you need to process one person's details but the contract is with someone else.
Article 6(3) requires that the legal obligation must be laid down by UK or EU law. Recital 41 confirms that
What are 'vital interests'?
data.
In brief
In brief
also need to comply with Article 10.
Right to be informed
☐ The lawful basis for the processing.
Other information
When is data inaccurate?
How does the right to erasure apply to data collected from children?
In brief
What does the right apply to?
What is the right to object?
Solely automated individual decision-making, including profiling with legal or similarly
In brief
In brief
In brief
In brief
DPIA screening checklist
In brief
Why sign up to a code of conduct?
25(3));
Security
In brief
Encryption and data storage
Although the GDPR does not define what is 'appropriate', it does provide further considerations in Article
In brief
In brief
The 'domestic purposes' exemption in the 1998 Act is not replicated. This is because the GDPR does not
have their immigration applications reviewed and to submit an appeal against an asylum decision or a