Tuesday, September 26, 2017

GDPR - Keeping Record of Consent



The GDPR specifically state that you must be able to prove that you have received Consent from an individual if you chose this as your legal justification for processing personal data.

"Where processing is based on the data subject's consent, the controller should be able to demonstrate that the data subject has given consent to the processing operation...." [GDPR Citation 42].

And this is reiterated again in Article 7, Conditions for Consent;

"Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data." [GDPR Article 7, Paragraph (1)].


  

No comments:

Post a Comment