3 ms·
You're right. That's an oversimplification. GDPR requires a "lawful justification" to collect the information. The six justifications all speak to consent or
by elliekelly 8y ago
You're right. That's an oversimplification. GDPR requires a "lawful justification" to collect the information. The six justifications all speak to consent or fulfilling legal obligations (government investigation, court order, contract performance, etc). Consent is a critical component of GDPR, though, as evidenced by the hundreds of GDPR consent emails that swarmed our inboxes in May.
- pgeorgi 8y agoThe consent emails are evidence that people in charge were mindlessly following some rules given by some consultants. Not all of them were necessary, and some of them might be harmful to those sending them down the road: if they had a valid reason before but asked, question is what happens if the person on which data was collected rescinds their permission? Answering "you refuse, but we have a legit reason according to GDPR" is a recipe for bad PR at least.