On Dec. 12, the Article 29 Working Party released for comment a draft of its guidance on consent under the upcoming General Data Protection Regulation. The draft will remain open for public comment until Jan. 23, 2018. Consent is one of the six lawful bases for the processing of personal data under the GDPR. Consent is also one of the permitted derogations by which personal data may be transferred to a third country outside of the European Union, even if that country has not been found by the Commission to provide an “adequate” level of protection. Here, IAPP Westin Fellow Lee Matheson, CIPP/US, CIPP/E, briefly summarizes the Working Party’s guidance for you.
If you want to comment on this post, you need to login.