It doesn’t have to be “documented in writing” necessarily, nor is the “written form” required, although this is a suitable way to ensure the unambiguous nature and explicitness of the consent.

Furthermore, the data controller must always be able to demonstrate that the data subject has given their consent for each processing activity.

Find out more about Legal bases for processing of personal data.

The post YOU DON’T ALWAYS HAVE TO SAY YES appeared first on Arc Rec Project.

https://arc-rec-project.eu/wp-content/uploads/2021/01/ARC-GUIDANCE-Quick-Guide-to-the-Principles-of-Data.pdf

The post Data protection principles: purpose limitation appeared first on Arc Rec Project.

https://arc-rec-project.eu/wp-content/uploads/2021/01/ARC-GUIDANCE-Quick-Guide-to-the-Principles-of-Data.pdf

The post Data Protection Principles: Accuracy appeared first on Arc Rec Project.

The purpose of this survey is to gain insights into the way in which Data Protection is incorporated into the daily workings of small to medium enterprises across Europe and, in particular, the challenges faced by SMEs in their efforts to comply with the General Data Protection Regulation. The aim of the survey is to provide guidance to the ARC project so that it can tailor its guidance to better suit the needs of the sector and reduce the burden associated with compliance. The survey is conducted on an anonymous basis and the results will be based on aggregate data. Information from these surveys will not be shared with Data Protection Authorities for the purposes of regulatory enforcement.

On the 25^th May 2018, the General Data Protection Regulation came into effect across all EU member states. This harmonised law replaced existing data protection regulations in each country. Having just one law will benefit business and promote responsibility when dealing with personal data, but ensuring compliance requires work on the part of organisations of all sizes. In recognition of this, the ARC Project has been convened to work with small and medium enterprises who may not have access to extensive resources and consequently struggle with compliance issues. By gaining greater insight into the climate in which SMEs operate, the ARC project aims to assist the sector to grow and prosper is an efficient and compliant way.

If you process personal data as part of your business, the GDPR applies to you. It is important to remember that:

• Employee data is also personal data
• Simply storing personal information on file constitutes ‘processing’ personal data.

The survey is structured to allow for aggregated data to be generated from the responses. The responses will not be used for enforcement purposes by any Data Protection Authority. Please be as honest as you can in your answers – accurate responses are essential to produce relevant guidance.

The post Survey on the challenges faced by SMEs in their efforts to comply with the GDPR appeared first on Arc Rec Project.