3 ms·
> What law are you referring to? GDPR. It requires that the person whose personal data is processed must give explicit permission about what data is processed
by C14L 7y ago
> What law are you referring to?
GDPR. It requires that the person whose personal data is processed must give explicit permission about what data is processed and allow the purpose for which the data is processed. And it must be possible at any time to withdraw that permission and to delete the data.
At least as far as I understand those rules, ianal.
- DanBC 7y ago> It requires that the person whose personal data is processed must give explicit permission about what data is processed > and allow the purpose for which the data is processed. > And it must be possible at any time to withdraw that permission > and to delete the data. No it doesn't. There are several lawful bases for storing and processing data. User permission is only one of those bases. It's usually not the best one to use. https://ico.org.uk/for-organisations/gdpr-resources/lawful-basis-resources/ https://ico.org.uk/for-organisations/gdpr-resources/lawful-b...