Chapter 2B: Territorial and Material Scope of GDPR Flashcards

1
Q

For the GDPR to be applicable, in regards to territorial scope, just one of the following three criteria must be met:

A
  • Processing of personal data where a controller or processor is established in the EU
  • Processing of personal data of data subjects in the EU relating to offering goods or services or monitoring behaviour in the EU
  • Processing of personal data by a controller not established in the EU but in a place where member state law applies by virtue of public international law
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

EDPB says processing personal data of individuals in the EU alone is not the trigger for GDPR; the important element is…

A

Targeting of data subjects in the EU.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What can be considered ‘monitoring’ of behaviour in the EU?

A

Digital tracking of behaviour, plus CCTV usage and
market surveys.

EDPB adds that its not just any online collection or analysis of personal data, but dependent on purpose.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the material scope of the GDPR (Article 2)

A

Processing of personal data
wholly or partly by automated means or
processing other than by automated means
which form part of a filing system (or intended to)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is automated processing?

A

Any processing operation performed without human intervention

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What exclusions are there to material scope?

A

Activities outside the scope of Union Law (e.g. national security activities)

Border checks, asylum and immigration

Household activity

Law enforcement and public security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly