Application of the regulationDo the data protection rules apply to data about a company?Do the rules apply to SMEs?Who does the data protection law apply to?Dealing with citizensAre there restrictions on the use of automated decision-making?Can individuals ask to have their data transferred to another organisation?Do we always have to delete personal data if a person asks?How should requests from individuals exercising their data protection rights be dealt with?What happens if someone objects to my company processing their personal data?What personal data and information can an individual access on request?Enforcement and sanctionsEnforcementSanctionsLegal grounds for processing dataAre there any specific safeguards for data about children?Can data received from a third party be used for marketing?Grounds for processingSensitive dataLibrary of related documentsLibrary of related documentsObligationsAre the obligations the same regardless of the amount of data my company/organisation handles?Controller/processorData Protection OfficersHow can I demonstrate that my organisation is compliant with the GDPR?What does data protection ‘by design’ and ‘by default’ mean?What is a data breach and what do we have to do in case of a data breach?What rules apply if my organisation transfers data outside the EU?When is a Data Protection Impact Assessment (DPIA) required?Principles of the GDPRFor how long can data be kept and is it necessary to update it?How much data can be collected?Overview of principlesPurpose of data processingWhat information must be given to individuals whose data is collected?Public administrations and data protectionHow should requests from individuals be dealt with?What are the main aspects of the General Data Protection Regulation (GDPR) that a public administration should be aware of?What if a public administration fails to comply with the data protection rules?
Application of the regulationDo the data protection rules apply to data about a company?Do the rules apply to SMEs?Who does the data protection law apply to?
Dealing with citizensAre there restrictions on the use of automated decision-making?Can individuals ask to have their data transferred to another organisation?Do we always have to delete personal data if a person asks?How should requests from individuals exercising their data protection rights be dealt with?What happens if someone objects to my company processing their personal data?What personal data and information can an individual access on request?
Legal grounds for processing dataAre there any specific safeguards for data about children?Can data received from a third party be used for marketing?Grounds for processingSensitive data
ObligationsAre the obligations the same regardless of the amount of data my company/organisation handles?Controller/processorData Protection OfficersHow can I demonstrate that my organisation is compliant with the GDPR?What does data protection ‘by design’ and ‘by default’ mean?What is a data breach and what do we have to do in case of a data breach?What rules apply if my organisation transfers data outside the EU?When is a Data Protection Impact Assessment (DPIA) required?
Principles of the GDPRFor how long can data be kept and is it necessary to update it?How much data can be collected?Overview of principlesPurpose of data processingWhat information must be given to individuals whose data is collected?
Public administrations and data protectionHow should requests from individuals be dealt with?What are the main aspects of the General Data Protection Regulation (GDPR) that a public administration should be aware of?What if a public administration fails to comply with the data protection rules?
