Module 17 2024

05/12/2024

• GDPR – Lawfulness, fairness and transparency • Lawfulness: – There has to be a lawful basis for the processing/use of the personal data that is • Fairness: – You must not process personal data in a way that is unduly detrimental, unexpected or misleading to the individuals concerned • Transparency: – You must be clear, open and honest with people from the start about how you will use their personal data (fair processing notice/Privacy Policy) collected. There are 6 grounds for lawful processing under the GDPR (Article 6).

159

• GDPR – Purpose Limitation

• Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. – Document your purpose or purposes for processing – If the personal data is to be used for a new purpose, check that it is compatible with the original purpose, get consent from the data subject, or undertake a new DPIA.

160

80