{"id":706,"date":"2018-05-31T19:55:59","date_gmt":"2018-05-31T18:55:59","guid":{"rendered":"https:\/\/hjinterim.wordpress.com\/?p=706"},"modified":"2018-05-31T19:55:59","modified_gmt":"2018-05-31T18:55:59","slug":"today-i-learned-something-new-about-gdpr","status":"publish","type":"post","link":"https:\/\/hjinterim.tech\/index.php\/2018\/05\/31\/today-i-learned-something-new-about-gdpr\/","title":{"rendered":"Today I learned something new about GDPR"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n

General Data Protection Regulation GDPR<\/p>\n

Here you can find the Regulation (EU) 2016\/679 (General Data Protection Regulation) as a neatly arranged overview. The European Data Protection Regulation is applicable as of May 25th, 2018 in all member states to harmonize data privacy laws across Europe.<\/p>\n

Quick Overview<\/strong><\/h1>\n

Chapter 1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1 2 3 4<\/strong><\/p>\n

Chapter 2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 5 6 7 8 9 10 11<\/strong><\/p>\n

Chapter 3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 12 13 14 15 16 17 18 19 20 21 22 23<\/strong><\/p>\n

Chapter 4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43<\/strong><\/p>\n

Chapter 5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 44 45 46 47 48 49 50<\/strong><\/p>\n

Chapter 6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 51 52 53 54 55 56 57 58 59<\/strong><\/p>\n

Chapter 7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76<\/strong><\/p>\n

Chapter 8\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 77 78 79 80 81 82 83 84<\/strong><\/p>\n

Chapter 9\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 85 86 87 88 89 90 91<\/strong><\/p>\n

Chapter 10\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 92 93<\/strong><\/p>\n

Chapter 11\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 94 95 96 97 98 99<\/strong><\/p>\n

\u00a0<\/p>\n

\u00a0<\/p>\n

Chapter 1 \u2013 General provisions<\/strong><\/h1>\n

Article 1 \u2013 Subject matter and objectives<\/p>\n

Article 2 \u2013 Material scope<\/p>\n

Article 3 \u2013 Territorial scope<\/p>\n

Article 4 \u2013 Definitions<\/p>\n

\u00a0<\/p>\n

Chapter 2 \u2013 Principles<\/strong><\/h1>\n

Article 5 \u2013 Principles relating to processing of personal data<\/p>\n

Article 6 \u2013 Lawfulness of processing<\/p>\n

Article 7 \u2013 Conditions for consent<\/p>\n

Article 8 \u2013 Conditions applicable to child’s consent in relation to information society services<\/p>\n

Article 9 \u2013 Processing of special categories of personal data<\/p>\n

Article 10 \u2013 Processing of personal data relating to criminal convictions and offences<\/p>\n

Article 11 \u2013 Processing which does not require identification<\/p>\n

\u00a0<\/strong><\/p>\n

Chapter 3 \u2013 Rights of the data subject<\/strong><\/h1>\n

Section 1 \u2013 Transparency and modalities<\/strong><\/p>\n

Article 12 \u2013 <\/strong>Transparent information, communication and modalities for the exercise of the rights of the data subject<\/p>\n

Section 2 \u2013 Information and access to personal data<\/strong><\/p>\n

Article 13 \u2013 Information to be provided where personal data are collected from the data subject<\/p>\n

Article 14 \u2013 Information to be provided where personal data have not been obtained from the data subject<\/p>\n

Article 15 \u2013 Right of access by the data subject<\/p>\n

Section 3 \u2013 Rectification and erasure<\/strong><\/p>\n

Article 16 \u2013 Right to rectification<\/p>\n

Article 17 \u2013 Right to erasure (\u2018right to be forgotten\u2019)<\/p>\n

Article 18 \u2013 Right to restriction of processing<\/p>\n

Article 19 \u2013 Notification obligation regarding rectification or erasure of personal data or restriction of processing<\/p>\n

Article 20 \u2013 Right to data portability<\/p>\n

Section 4 \u2013 Right to object and automated individual decision-making<\/strong><\/p>\n

Article 21 \u2013 Right to object<\/p>\n

Article 22 \u2013 Automated individual decision-making, including profiling<\/p>\n

Section 5 \u2013 Restrictions<\/strong><\/p>\n

Article 23 \u2013 Restrictions<\/p>\n

\u00a0<\/strong><\/p>\n

Chapter 4 \u2013 Controller and processor<\/strong><\/h1>\n

Section 1 \u2013 General obligations<\/strong><\/p>\n

Article 24 \u2013 Responsibility of the controller<\/p>\n

Article 25 \u2013 Data protection by design and by default<\/p>\n

Article 26 \u2013 Joint controllers<\/p>\n

Article 27 \u2013 Representatives of controllers or processors not established in the Union<\/p>\n

Article 28 \u2013 Processor<\/p>\n

Article 29 \u2013 Processing under the authority of the controller or processor<\/p>\n

Article 30 \u2013 Records of processing activities<\/p>\n

Article 31 \u2013 Cooperation with the supervisory authority<\/p>\n

Section 2 \u2013 Security of personal data<\/strong><\/p>\n

Article 32 \u2013 Security of processing<\/p>\n

Article 33 \u2013 Notification of a personal data breach to the supervisory authority<\/p>\n

Article 34 \u2013 Communication of a personal data breach to the data subject<\/p>\n

Section 3 \u2013 Data protection impact assessment and prior consultation<\/strong><\/p>\n

Article 35 \u2013 Data protection impact assessment<\/p>\n

Article 36 \u2013 Prior consultation<\/p>\n

Section 4 \u2013 Data protection officer<\/strong><\/p>\n

Article 37 \u2013 Designation of the data protection officer<\/p>\n

Article 38 \u2013 Position of the data protection officer<\/p>\n

Article 39 \u2013 Tasks of the data protection officer<\/p>\n

Section 5 \u2013 Codes of conduct and certification<\/strong><\/p>\n

Article 40 \u2013 Codes of conduct<\/p>\n

Article 41 \u2013 Monitoring of approved codes of conduct<\/p>\n

Article 42 \u2013 Certification<\/p>\n

Article 43 \u2013 Certification bodies<\/p>\n

\u00a0<\/strong><\/p>\n

Chapter 5 \u2013 Transfers of personal data to third countries or international organizations<\/strong><\/h1>\n

Article 44 \u2013 General principle for transfers<\/p>\n

Article 45 \u2013 Transfers on the basis of an adequacy decision<\/p>\n

Article 46 \u2013 Transfers subject to appropriate safeguards<\/p>\n

Article 47 \u2013 Binding corporate rules<\/p>\n

Article 48 \u2013 Transfers or disclosures not authorized by Union law<\/p>\n

Article 49 \u2013 Derogations for specific situations<\/p>\n

Article 50 \u2013 International cooperation for the protection of personal data<\/p>\n

\u00a0<\/strong><\/p>\n

Chapter 6 \u2013 Independent supervisory authorities<\/strong><\/h1>\n

Section 1 \u2013 Independent status<\/p>\n

Article 51 \u2013 Supervisory authority<\/p>\n

Article 52 \u2013 Independence<\/p>\n

Article 53 \u2013 General conditions for the members of the supervisory authority<\/p>\n

Article 54 \u2013 Rules on the establishment of the supervisory authority<\/p>\n

Section 2 \u2013 Competence, tasks and powers<\/p>\n

Article 55 \u2013 Competence<\/p>\n

Article 56 \u2013 Competence of the lead supervisory authority<\/p>\n

Article 57 \u2013 Tasks<\/p>\n

Article 58 \u2013 Powers<\/p>\n

Article 59 \u2013 Activity reports<\/p>\n

\u00a0<\/strong><\/p>\n

Chapter 7 \u2013 Cooperation and consistency<\/strong><\/h1>\n

Section 1 \u2013 Cooperation<\/strong><\/p>\n

Article 60 \u2013 Cooperation between the lead supervisory authority and the other supervisory authorities concerned<\/p>\n

Article 61 \u2013 Mutual assistance<\/p>\n

Article 62 \u2013 Joint operations of supervisory authorities<\/p>\n

Section 2 \u2013 Consistency<\/strong><\/p>\n

Article 63 \u2013 Consistency mechanism<\/p>\n

Article 64 \u2013 Opinion of the Board<\/p>\n

Article 65 \u2013 Dispute resolution by the Board<\/p>\n

Article 66 \u2013 Urgency procedure<\/p>\n

Article 67 \u2013 Exchange of information<\/p>\n

Section 3 \u2013 European data protection board<\/strong><\/p>\n

Article 68 \u2013 European Data Protection Board<\/p>\n

Article 69 \u2013 Independence<\/p>\n

Article 70 \u2013 Tasks of the Board<\/p>\n

Article 71 \u2013 Reports<\/p>\n

Article 72 \u2013 Procedure<\/p>\n

Article 73 \u2013 Chair<\/p>\n

Article 74 \u2013 Tasks of the Chair<\/p>\n

Article 75 \u2013 Secretariat<\/p>\n

Article 76 \u2013 Confidentiality<\/p>\n

\u00a0<\/strong><\/p>\n

Chapter 8 \u2013 Remedies, liability and penalties<\/strong><\/h1>\n

Article 77 \u2013 Right to lodge a complaint with a supervisory authority<\/p>\n

Article 78 \u2013 Right to an effective judicial remedy against a supervisory authority<\/p>\n

Article 79 \u2013 Right to an effective judicial remedy against a controller or processor<\/p>\n

Article 80 \u2013 Representation of data subjects<\/p>\n

Article 81 \u2013 Suspension of proceedings<\/p>\n

Article 82 \u2013 Right to compensation and liability<\/p>\n

Article 83 \u2013 General conditions for imposing administrative fines<\/p>\n

Article 84 \u2013 Penalties<\/p>\n

\u00a0<\/strong><\/p>\n

Chapter 9 \u2013 Provisions relating to specific processing situations<\/strong><\/h1>\n

Article 85 \u2013 Processing and freedom of expression and information<\/p>\n

Article 86 \u2013 Processing and public access to official documents<\/p>\n

Article 87 \u2013 Processing of the national identification number<\/p>\n

Article 88 \u2013 Processing in the context of employment<\/p>\n

Article 89 \u2013 Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes<\/p>\n

Article 90 \u2013 Obligations of secrecy<\/p>\n

Article 91 \u2013 Existing data protection rules of churches and religious associations<\/p>\n

\u00a0<\/strong><\/p>\n

Chapter 10 \u2013 Delegated acts and implementing acts<\/strong><\/h1>\n

Article 92 \u2013 Exercise of the delegation<\/p>\n

Article 93 \u2013 Committee procedure<\/p>\n

\u00a0<\/strong>\u00a0<\/strong><\/p>\n

Chapter 11 \u2013 Final provisions<\/strong><\/h1>\n

Article 94 \u2013 Repeal of Directive 95\/46\/EC<\/p>\n

Article 95 \u2013 Relationship with Directive 2002\/58\/EC<\/p>\n

Article 96 \u2013 Relationship with previously concluded Agreements<\/p>\n

Article 97 \u2013 Commission reports<\/p>\n

Article 98 \u2013 Review of other Union legal acts on data protection<\/p>\n

Article 99 \u2013 Entry into force and application<\/p>","protected":false},"excerpt":{"rendered":"

General Data Protection Regulation GDPR Here you can find the Regulation (EU) 2016\/679 (General Data Protection Regulation) as a neatly arranged overview. The European Data Protection Regulation is applicable as of May 25th, 2018 in all member states to harmonize data privacy laws across Europe. Quick Overview Chapter 1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1 2 3 4 Chapter … Read moreToday I learned something new about GDPR<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":736,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"quote","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[20],"tags":[],"class_list":["post-706","post","type-post","status-publish","format-quote","has-post-thumbnail","hentry","category-gdpr","post_format-post-format-quote"],"_links":{"self":[{"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/posts\/706","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/comments?post=706"}],"version-history":[{"count":0,"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/posts\/706\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/posts\/736"}],"wp:attachment":[{"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/media?parent=706"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/categories?post=706"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hjinterim.tech\/index.php\/wp-json\/wp\/v2\/tags?post=706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}