Remove 11
Remove 2018 Remove Document Remove Examples Remove Exercises Remove Government
article thumbnail

GDPR: lawful bases for processing, with examples

IT Governance

First published June 2018. An ‘affirmative act’ means the data subject has to opt-in – you cannot assume their consent, for example by using pre-ticked boxes on your website. For example, when you process staff data for payroll purposes, contractual obligations will apply, as staff will have signed a contract of employment.

GDPR 92
article thumbnail

GDPR: lawful bases for processing, with examples

IT Governance

For tasks carried out in the public interest or exercise of authority vested in the data controller. For example, when you process staff data for payroll purposes, contractual obligations will apply, as staff will have signed a contract of employment. To comply with the data controller’s legal obligations. Legal obligations.

GDPR 70
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

UK Court of Appeal Finds Automated Facial Recognition Technology Unlawful in Bridges v South Wales Police

Hunton Privacy

On August 11, 2020, the Court of Appeal of England and Wales overturned the High Court’s dismissal of a challenge to South Wales Police’s use of Automated Facial Recognition technology (“AFR”), finding that its use was unlawful and violated human rights. It is not a question of simple multiplication.

article thumbnail

The Impact of Data Protection Laws on Your Records Retention Schedule

ARMA International

The purpose of this article is to remove the fear and intimidation of domestic and global data protection laws and show how these laws and requirements are consistent with the existing objectives of your records retention schedule and information governance policy. 3 Personal Information Protection and Electronic Documents Act (PIPEDA).

article thumbnail

The Burden of Privacy In Discovery

Data Matters

To pick just two recent examples of the latter, the EU’s General Data Protection Regulation1 (GDPR) and the California Consumer Privacy Act2 (CCPA) both impose sweeping requirements on businesses with the aim of increasing consumers’ privacy and control over how their personal data is used. For example, in John B.

Privacy 97
article thumbnail

Sharenting, BYOD and Kids Online: 10 Digital Tips for Modern Day Parents

Troy Hunt

And just a side-note before I jump into those fundamentals: I had a quick flick through the government's eSafety guidance for children under 5 whilst on the plane and it has a bunch of really good stuff. For example, my son teaching kids to code in London a couple of weeks ago: Teaching kids to code at #NDCLondon with @CodeCombat.

Privacy 140
article thumbnail

Key takeaways for the private sector from The Bridges v South Wales police facial recognition case

Data Protection Report

On 11 August 2020, the Court of Appeal ( CA ) handed down its judgement in the case of R (on the application of Edward BRIDGES) v The Chief Constable of South Wales Police. The High Court was wrong to hold that SWP’s Data Protection Impact Assessment ( DPIA ) complied with the requirements of section 64 of the Data Protection Act 2018.

Risk 59