Records of processing activities
WAITING FOR TRANSLATION
Category Archives: Legal framework
Right to be forgotten: all on the same road!
During this summer the Italian Privacy Autority had posted in Newsletter n. 431 of 8.8.2017 a summary of a Provision n. 277 del 15.6.2017 that was based on the fact of how, under the right to be forgotten, time is not the only factor to be taken into account for the existence of same. From the… Read More »
WILL THE CONSENT COLLECTED BEFORE THE EFFECTIVE DATE OF GDPR STILL BE VALID?
The “Guide on the Application of the European Personal Data Protection Regulation” published by the Italian DPA states, in the “Recommendations” at the foot of the consensus form, that: “The consent obtained before May 25, 2018 remains valid if it has all of the above characteristics. Otherwise, it is appropriate to work before that date… Read More »
Regolamento, Direttiva e Codice privacy. Tra norme vigenti e norme abrogate.
WAITING FOR TRANSLATION
Clinical trials and GDPR
Clinical trials data are the ones more frequently processed by pharma and medical device companies: trial centers are also involved in this data processing. Under the data protection legislation, pharma and medical device companies are controllers and trial centres are processor, most of the time. But these roles are not always clear. In the WP… Read More »
20 Years in 2 minutes and 38 seconds!
A short video of only 2 minutes and 38 seconds to remind us where we started from, where we are noe and where we are going to, a celebratory and summary video of 20 years of privacy law in Italy. A movie maybe a bit nostalgic and “old fashion” but that it casts on the… Read More »
App and Privacy Policy. A case of Mobile Strong Authentication without mobile
WAITING FOR TRANSLATION
Guidelines DPIA … for whom / for what ??
On 4.4.2017 the WP has adopted the “Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679” the question is why, for whom and for what. The answer is inside the document and is not a secondary matter because if… Read More »
ePrivacy Regulation Proposal and GDPR
The European Data Protection Supervisor (EDPS) has published an Opinion on the Proposal for a Regulation on Privacy and Electronic Communications (ePrivacy Regulation), which will complement the GDPR within the European Data Protection Framework. Buttarelli appreciates several positive aspects of the Proposal and also the fact that the legislator has adopted some of its previous… Read More »
The new European Regulation gives greater value and facilitation to scientific research.
The Directive 95/46/EC deal with the argument in the following terms: The processing of personal data for scientific research purposes is not considered incompatible with other processing (art. 6) For scientific use, personal data may be stored for longer periods (art. 6) The provision of information to the data subject may not be given when… Read More »