In 2016’s Guidance, the United Kingdom’s Information Commissioner’s Office (ICO) reaffirmed the importance of using a “layered notice” to provide data subjects with what?
When collecting personal data in a European Union (EU) member state, what must a company do if it collects personal data from a source other than the data subjects themselves?
Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?
Assuming that the “without undue delay” provision is followed, what is the time limit for complying with a data access request?
A U.S.-based online shop uses sophisticated software to track the browsing behavior of its European customers and predict future purchases. It also shares this information with third parties. Under the GDPR, what is the online shop’s PRIMARY obligation while engaging in this kind of profiling?
Which statement is correct when considering the right to privacy under Article 8 of the European Convention on Human Rights (ECHR)?