What's a personal data?

A personal data is any information that identifies or can be used to identify an individual directly or indirectly.

Examples of personal data include, but are not limited to: first and last name, date of birth, email address, postal address, gender, occupation, photography, or other demographic information.

Some are considered more sensible than others like biometric data, health related data or sexual orientation.

What's a Data Privacy Impact Assessment

A Data Privacy Impact Assessment must be carried out by a controller when certain conditions are met and in compliance with Article 35 of the GDPR. It provides the assurance that privacy is adequately addressed, that risky processings are acknowledged and that the controller knows how to mitigate those risks for data subjects.

What's a rights request?

Data subjects have rights upon their personal data: right of access (Article 15), of rectification (Article 16), of erasure (Article 17) and objection (Article 21), right to the restriction of processing (Article 18), right to data portability (Article 20), right not to be subject to an automated individual decision (Article 22).

Can I transfer data outside the European Union?

Location where data is stored is a paramount criteria for controllers. If servers hosting data are located in the European Union or in an adequate country, data transfers can be operated without additional safeguards as these countries’ legislations are protective enough of personal data and individuals’ rights.

Become GDPR compliant in minutes!

Privacyboard helps you comply with GDPR easily so you can focus on what's really important for your business.