However, consent does not need to be used as the GDPR lawful basis, or necessarily need to be of the high standard that GDPR imposes (usually equating to an opt-in mechanism). This issue can be ...

What is a lawful basis? The UK GDPR provides a list of reasons that organisations can use to legitimately process personal data. These are known collectively as the Lawful Bases for Processing. (a) ...

When using consent as a lawful basis, we must keep a record to evidence that consent was given. Example: To receive a free student membership of a professional body, student's are asked to provide ...

Looking for a new challenge, or need to hire your next privacy pro? The IAPP Job Board is the answer. Learn how to surround AI with policies and procedures that make the most of its potential by ...

Q I have a new compliance officer who is taking a much stricter approach to the GDPR than we previously thought was necessary, such as saying we shouldn’t be storing potential customers’ work emails ...

The General Data Protection Regulation (GDPR) is a European Union regulation, relating to how personal data and information is managed. It came into effect on 25 May 2018, replacing the Data ...

This might be a legal obligation or a legitimate interest, as defined by the GDPR. There must be a clearly defined purpose for the use of personal data captured from dashcams. The purpose (together ...

The GDPR and the DPA require controllers and processors to comply with principles such as lawfulness, fairness, transparency, data minimisation, security, and accountability, and to obtain valid ...

We only process Special Category and Criminal Offence where we have a lawful basis to do so under Articles 6, 9 and 10 UK GDPR and, where required, when we have identified a condition under Schedule 1 ...