Week 13

Question 1

Under the GDPR, lawfulness requires either:

Answer 1

• consent of the data subject;
• necessity to enter or perform a contract;
• a legal obligation;
• necessity to protect the vital interests of the data subject or another person;
• necessity for performing a task in the public interest;
• necessity for the legitimate interests of the controller or a third party, if they are not overridden by the interests and rights of the data subject.

Question 2

When must the purpose of processing data be provided

Answer 2

Before data processing is started

Question 3

Definition of the principle of purpose limitation

Answer 3

any processing of personal data must be done for a specific well-defined purpose. And, only for additional, specified, purposes compatible with the original one.

Question 4

Purpose of processing data must be:

Answer 4

Explicit, specified, and legitimate

Question 5

Who should the principle of data accuracy be implemented by

Answer 5

The controller in all processing obligations