Article 11 Processing which does not require identification

Author(s):  
Ludmila Georgieva

Article 4(1) (Definition of ‘personal data’); Article 5 (Principles relating to processing of personal data) (see too recital 39); Article 6 (Lawfulness of processing); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Articles 15–20 (Data subject rights) (see too recital 64); Article 24 (Responsibility of the controller); Article 25 (Data protection by design and default) (see too recital 78); Article 32 (Security of processing) (see too recital 83).

Author(s):  
Lee A. Bygrave

Article 4(5) (Definition of ‘pseudonymisation’) (see too recital 28); Article 5(2) (Accountability) (see too recital 11); Article 6(4)(e) (Compatibility); Article 22 (Automated individual decision-making, including profiling) (see too recital 71); Article 24 (Responsibility of controllers); Article 28 (Processors) (see too recital 81); Article 32 (Security of processing) (see too recital 83); Article 34(3)(a) (Communication of personal data breach to data subject) (see too recitals 87–88); Article 35 (Data protection impact assessment) (see too recital 84); Article 40 (Codes of conduct); Article 83(2)(d) and 83(4) (Fines); Article 89(1) (Safeguards relating to processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes).


Author(s):  
Ludmila Georgieva ◽  
Christopher Kuner

Article 4(1) (Definition of personal data); Article 4(2) (Definition of processing); Article 4(11) (Definition of consent); Article 4(13) (Definition of genetic data, see also recital 34); Article 4(14) (Definition of biometric data); Article 4(15) (Definition of data concerning health, see also recital 35); Article 6(4)(c) (Lawfulness of processing, compatibility test) (see too recital 46 on vital interest); Article 13(2)(c) (Information to be provided where personal data are collected from the data subject); Article 17(1)(b), (3)(c) (Right to erasure (‘right to be forgotten’)); Article 20(1)(a) (Right to data portability); Article 22(4) (Automated individual decision-making, including profiling); Article 27(2)(a) (Representatives of controllers or processors not established in the Union); Article 30(5) (Records of processing activities); Article 35(3)(b) (Data protection impact assessment) (see too recital 91); Article 37(1)(c) (Designation of the data protection officer) (see too recital 97); Article 83(5)(a) (General conditions for imposing administrative fines).


Author(s):  
Gloria González Fuster

Article 4(9) (Definition of ‘recipient’); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 16 (Right to rectification), Article 17(1) (Right to erasure (‘right to be forgotten’)); Article 18 (Right to restriction of processing); Article 58(2)(g) (Powers of supervisory authorities); Article 89(3) (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes).


Author(s):  
Gabriela Zanfir-Fortuna

Article 5(1) (Principle of fairness, lawfulness and transparency); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 15 (Right of access by the data subject); Article 23 (Restrictions); Article 34 (Communication of a personal data breach to the data subject).


Author(s):  
Cécile de Terwangne

Article 5(d) (Principles relating to processing of personal data—accuracy) (see too recital 39); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject) (see too recital 59); Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing); Article 23 (Restrictions) (see too recital 73); Article 89 (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes) (see too recital 156).


Author(s):  
Cédric Burton

Recital 88; Article 4(12) (Definition of a personal data breach); Article 5(2)) (Accountability principle); Article 28(3)(f) (Processor); Article 32 (security of processing); Article 34 (Communication of a breach to the data subject) (see too recital 86); Article 70(1)(g)(h) (Tasks of the Board); Article 83(4)(a) (Fines for infringement of Article 33).


Author(s):  
Gabriela Zanfir-Fortuna

Article 5(1) (Principle of fairness, lawfulness and transparency); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 15 (Right of access by the data subject); Article 23 (Restrictions); Article 34 (Communication of a personal data breach to the data subject).


Author(s):  
Gabriela Zanfir-Fortuna

Article 5(1) (Principles of fairness, lawfulness and transparency) (see too recital 39); Article 11 (Processing which does not require identification) (see too recital 57); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject) (see too recitals 58–59); Article 13 (Information to be provided where personal data are collected from the data subject) (see too recital 60); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 23 (Restrictions) (see too recital 73).


Author(s):  
Dominique Moore

Article 5 (Principles relating to processing of personal data) (see too recitals 41, 45 and 50); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 13 (Information to be provided where personal data are collected from the data subject); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 15 (Right of access by the data subject); Article 16 (Right to rectification); Article 17 (Right to erasure, ‘right to be forgotten’); Article 18 (Right to restriction of processing); Article 20 (Right to data portability); Article 21 (Right to object); Article 22 (Automated individual decision-making, including profiling); Article 34 (Communication of a personal data breach to the data subject).


Author(s):  
Lee A. Bygrave

Article 3(2)(b) (Monitoring of data subjects’ behaviour); Article 4(4) (Definition of ‘profiling’); Article 5(1)(a) (Fair and transparent processing) (see also recitals 39 and 60); Article 5(2) (Accountability); Article 6 (Legal grounds for processing of personal data); Article 8 (Conditions applicable to children’s consent in relation to information society services); Article 12 (see too recital 58); Article 13(2)(f) (Information on the existence of automated decision-making); Article 14(2)(g) (Information on the existence of automated decision-making); Article 15(1)(h) (Right of access regarding automated decision-making); Article 21 (Right to object) (see also recital 70); Article 23 (Restrictions); Article 35(3)(a) (Data protection impact assessment) (see too recital 84); Article 47(2)(e) (Binding corporate rules); Article 70(1)(f) (EDPB guidelines on automated decisions based on profiling).


Sign in / Sign up

Export Citation Format

Share Document