umraniye escort pendik escort
maderba.com
implant
olabahis
canli poker siteleri meritslot oleybet giris adresi betgaranti
escort antalya
istanbul escort
sirinevler escort
antalya eskort bayan
brazzers
sikis
Short Reads

Countdown 5 weeks until GDPR : How should valid consent be proven?

Stibbe - How should valid consent be proven?

Countdown 5 weeks until GDPR : How should valid consent be proven?

19.04.2018 EU law

Only 5 more weeks to go before the GDPR becomes fully effective. Preparing your company for the application of this new regulation requires a correct understanding of its principles. Each week, we highlight one particular misconception regarding the interpretation of the GDPR.

How should valid consent be proven?

Article 7 of the GDPR reads: “the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data”. However, the GDPR does not contain specific, compulsory provisions in relation to the conditions for proving how the consent was given or obtained.

In that respect, the GDPR is inconsistent with the provisions of certain previous national legislations implementing Directive 95/46/EC (such as, e.g., the Italian Legislative Decree no. 196 of June 30, 2003, whereby the data subject’s consent could be deemed to be effective only if it is “documented in writing”).  

As a consequence, data controllers have the right to demonstrate how the valid consent was obtained by using any means allowed under their legal systems. In that respect, the use of any means for keeping a record of the data subjects’ consent - such as, for example, written statements, also statements stored by electronic means, or tick boxes to be set on internet websites specifically addressing the consent to be sought for the envisaged data processing activities - could be recommended.

Stibbe, together with Chiomenti, Cuatrecasas, GIDE and Gleiss Lutz, have gathered this useful information, reflecting some common misconceptions about the implementation of the GDPR.

Team

Related news

12.02.2021 EU law
After the Uber case and the Airbnb case … the Star Taxi App case: focus on the question of the qualification as “Information Society Service”

Articles - Societal and digital developments are reflected in the case law of the CJEU. For several years now, European judges resolve disputes relating to digital applications and the services they provide. On 3 December 2020, they handed down a judgment in a case concerning Star Taxi App. This blog analyses the Star Taxi App case law in the light of the Uber case law and the Airbnb case law. The three judgments have in common the question of the qualification of services as Information Society Services.  

Read more

05.01.2021 EU law
Uitwisseling van persoonsgegevens met het Verenigd Koninkrijk

Short Reads - Uit de Brexit deal volgt dat gedurende de eerste 4 maanden van 2021 de doorgifte van persoonsgegevens naar het Verenigd Koninkrijk (“VK”) nog op dezelfde manier mag plaatsvinden als voorheen. Maar alleen als het VK in deze periode de regels voor de bescherming van persoonsgegevens niet verandert. Deze periode van 4 maanden kan worden verlengd tot 6 maanden.

Read more