3 ms·
Not necessarily. They may even be required to store access information, due to legal regulations in some countries. Also, providing service may become practical
by ptaipale 8y ago
Not necessarily. They may even be required to store access information, due to legal regulations in some countries. Also, providing service may become practically impossible if it is not possible to keep logs and similar data.
- quohM0Ho 8y agoOther legal requirements trump the GDPR data minimization. In that case you only need to provide that data when the user wants a data export.
- JorgeGT 8y agoExactly, if you're providing a special service that requires logging (financial, etc.) then you need to follow other laws that trump GDPR, same as you need to obey traffic lights except if you drive an ambulance and there's an emergency, at which point other laws trump the general driving code.
- dangerface 8y agoYea, they cover that: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/legitimate-interests/ https://ico.org.uk/for-organisations/guide-to-the-general-da...
- Sean1708 8y agoAt which point it becomes "Legitimate Interests" (or whatever the correct term is).