CONCEPTS OF THE GDPR Flashcards
What is personal data?
According to article 4(1) GDPR personal data is any information relating an identified or identifiable natural person. (4 steps test)
In what case was it identified that dynamic IP addresses constitute personal data?
Patrick Breyer v Bundesrepublik Deutschland, ruled by the CJEU.
What is anonymous data?
Data that has been rendered unidentifiable and therefore is not covered by the GDPR. Pseudonymous data is covered though as the pseudonymization can be reversed.
What are sensitive personal data?
GDPR article 9(1): racial, ethnic orgin, political opinions, religious or philosophical beliefs, or trade union membership// genetic data, sexual orientation,…
When can you process sensitive personal data?
Article 10= processing shall be carried out only under the control of official authority or when the processing is authorised by Union or MS law providing for appropriate safeguards for the rights and freedoms of data subjects.
