- Are there restrictions on the use of automated decision-making?
- Can individuals ask to have their data transferred to another organisation?
- Do we always have to delete personal data if a person asks?
- How should requests from individuals exercising their data protection rights be dealt with?
- What happens if someone objects to my company processing their personal data?
- What personal data and information can an individual access on request?
Library of related documents
- Are the obligations the same regardless of the amount of data my company/organisation handles?
- Controller/processor
- Data Protection Officers
- How can I demonstrate that my organisation is compliant with the GDPR?
- What does data protection ‘by design’ and ‘by default’ mean?
- What is a data breach and what do we have to do in case of a data breach?
- What rules apply if my organisation transfers data outside the EU?
- When is a Data Protection Impact Assessment (DPIA) required?