General Data Protection Regulation (GDPR)

Examine the GDPR principles, grounded in Article 5, outlining lawful processing, purpose limitation, data minimization, accuracy, retention, and the accountability of controllers and processors.

Delve into lawful processing under the GDPR, examining Article 6 bases, consent requirements, and exceptions for special data categories and member state additions.

Learn consent under the GDPR, and the controller and processor roles, with key definitions from articles 4 and 8, including children's data and age of consent.

Explore the eight GDPR individual rights, including the right to be informed, right of access, rectification, erasure, restriction, data portability, objection, and protections against automated decision making.

Learn how the right to be informed requires transparent, concise, and accessible information about processing, modalities for communication, and the duties of controllers to respond within 30 days.

Understand the GDPR right of access (Article 15): data subjects can verify processing and obtain details of their personal data, with timelines and possible refusals.

Explore the right to rectification under the GDPR, enabling data subjects to have inaccurate personal data corrected by the controller without undue delay, and notify data recipients of changes.

Explore the right to erasure under the GDPR Article 17, including when data must be deleted, exceptions, direct marketing limits, and special considerations for children's data and downstream sharing.

Discover the right to restrict processing under the GDPR, allowing data subjects to pause processing when data is inaccurate, unlawfully processed, or needed for legal claims.

Explain the right to data portability under article 20: receive your personal data in a machine-readable format (CSV) and move it to another controller, where technically feasible, at no charge.

Explore the GDPR right to object under article 21, how data subjects halt processing (including direct marketing) and when compelling grounds or supervisory authority override objections.

Explore GDPR article 22 on automated decision making and profiling, uncovering the data subject's right to human intervention, explanation, and challenges, with safeguards and contract exemptions.

Explore accountability and governance under the GDPR, detailing the controller’s obligation to demonstrate compliance, appoint a data protection officer, and maintain records of processing activities.

Learn how the GDPR regulates transfers of personal data to third countries or international organizations under articles 44 to 49, using adequacy decisions, safeguards, consent, and binding corporate rules.

The gdpr breach notification requires notifying the supervisory authority within 72 hours and data subjects when risk is high. Encryption may exempt; fines up to 20 million euros or 4%.

Learn how GDPR national derogations allow states to carve exemptions while balancing security, public interest, and data rights. The section also emphasizes transparency and notifying the commission of changes.