The Irish Data Protection Commission has updated its guidance on the legal bases for processing personal data. The guidance focuses on data processing under the EU General Data Protection Regulation; however, it also covers data-processing requirements under the EU Law Enforcement Directive. The document covers topics such as consent, legitimate interests, vital interests and contracts. “This guidance should assist those individuals whose personal data may be processed (‘data subjects’) in identifying whether the processing of their personal data is lawful, and, as part of that, what the legal basis for that processing may be,” the document states.
If you want to comment on this post, you need to login.