Some basics of Privacy Science :

A lot has been written about the upcoming General Data Protection Regulation (GDPR) and the updated Directive on Privacy and Electronic Communications (E-Privacy Directive). However, before entering into details, we should all make sure that we understand what personal data is under the upcoming EU regulations and hence which information is protected by the Law.

Let’s move our focus towards the fairness and transparency of the process because having a legitimate ground is not enough. The way of processing is also vital for the respect of all the guarantees provided to the protection of personal data.

The Data Controller (“DC”) is the one who, alone or jointly, determines the purpose and means of the processing of personal data; in other words, is the one who decides why other’s personal data is processed and how it would be processed; therefore, is regulated under the GDPR and it is abided by its rules.
© 2017-18 Privacy Virtuoso Advisory LLP