havkom

14 ms·

1. 121.▲
   by havkom 9y ago

   Yes. Unless you have legacy systems with screen shot based SAR responses for example
2. 122.▲
   by havkom 9y ago

   > Functions that allow the users to delete and automatically download/access their own data is good practice for legitimate interest but not needed. You are anyway in general allowed to deal with these types of request on a case by
3. 123.▲
   by havkom 9y ago

   It will apply from 25 May 2018
4. 124.▲
   by havkom 9y ago

   Yes, this is important - GDPR is mainly about how you are allowed to use data, ie for what purposes you are processing the data (although collection and storage is also “processing” as a side point)
5. 125.▲
   by havkom 9y ago

   I believe this is true. In my country (Sweden) it appears like consent outside of offering internet services may require the data subject to be 18, not 13 (Sweden has made a local adjustment to 13 years of the 16-years old rule referred to)
6. 126.▲
   by havkom 9y ago

   Thanks for commenting my comment. 2. Yes, up to the legal team and what types of processing you do. If you do processing that the data subject would not expect you to do or that is not in their interest you have to consider this carefully.
7. 127.▲
   by havkom 9y ago

   What is “it”? GDPR is in large parts based on the Data Protection Directive from 1995 and “Convention 108” from 1981. There is ample of case law, data protection authority opinions, guidance, etc.
8. 128.▲
   by havkom 9y ago

   If you use “consent” as your “legal basis” and you are asking for consent that is related to the offering of services over the internet (such as a web shop, a social media web site, discussion forum, ...), you need to somehow verify age (16
9. 129.▲
   by havkom 9y ago

   I just want to point out that a lot of the article is the authors own opinion on how the regulation should be implemented into software and a lot of things are probably not needed normally and would be a burden for businesses. My own take (
10. 130.▲
    by havkom 9y ago

    Yes
11. 131.▲
    by havkom 9y ago

    And no, GDPR is from my own experience not easy to understand or apply in practice - except for PPT toy problems. There is a lot of more behind the articles in GDPR since it is partly based on legal instruments on data protection from 1981(
12. 132.▲
    by havkom 9y ago

    Yes and no. One of the most important principles in GDPR is “purpose limitation” (Article 5.1b): “Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible wi
13. 133.▲
    by havkom 9y ago

    See GDPR recital 24 ( http://www.privacy-regulation.eu/en/recital-24-GDPR.htm ): [...] In order to determine whether a processing activity can be considered to monitor the behaviour of data subjects, it should be ascerta
14. 134.▲
    by havkom 9y ago

    Sounds like you have a legitimate interest in logging IP addresses for security purposes, it is an effective measure and that your legitimate interest on balance outweighs the interests of the data subject. If that is the case you could pro
15. 135.▲
    by havkom 9y ago

    I could not have formulated this better myself. All but a few programmers I have met have tried to understand the underlying reason for their employment and the businesses issues they are employed to solve. This approach have caused program