Presence list in nursery with pictures and date of birth.. Is that allowed?
Question: my children go to a nursery. At the reception they have clipboards from each group of children. It is like a register in that it contains the names of every child who will be present on that day with their date of birth. You can see if the child is already present or not.…
Consent? Why?
Many articles in news media indicate that processing personal data is only allowed with the consent of the data subject. Anyone keeping an eye on the news around GDPR will have noticed. After many GDPR project in different organizations, I tend to think that after implementing GDPR it might be the other way around: the…
Retroactive effect and the GDPR
The GDPR will be enforced as of May 2018. Should all personal data in the database be weighed against the GDPR (including the consent), or do the new rules only apply to new personal data? It is true that the GDPR will be enforced as of May 2018. However, this is the end of the…
Passport photos of employees on website… Allowed under the GDPR?
Many organizations post names and passport photos of employees on the organization’s website. Sometimes only the members of the board of directors, but smaller organizations sometimes publish the entire team, with name and surname, function and sometimes even e-mail address. When compiling the records of processing, organizations run into the question whether this web publishing…
Data Protection Officer. Internal or outsourced?
The General Data Protection Regulation (GDPR) prescribes that a Data Protection Officer (DPO) must be appointed in the following situations: in case of a public authority, or in case of regular or systematic monitoring of data subjects on a large scale, or if large-scale processing of special categories or criminal convication and offences takes place Internal…