Search results | European Data Protection Board

Process personal data lawfully

Go to Process personal data lawfully

As a data controller I have collected individuals’ personal data from a third party, what do I need to do to be compliant?

Go to As a data controller I have collected individuals’ personal data from a third party, what do I need to do to be compliant?

Can I only process personal data when I have the individual’s consent?

Go to Can I only process personal data when I have the individual’s consent?

Can I publish the names of the winners of a competition on my organisation’s website?

Go to Can I publish the names of the winners of a competition on my organisation’s website?

Can I record telephone conversations with clients in order to improve quality of service and do I need consent for this?

Go to Can I record telephone conversations with clients in order to improve quality of service and do I need consent for this?

Can I set up the closed CCTV on my business premises to protect my property?

Go to Can I set up the closed CCTV on my business premises to protect my property?

Can I share a list of individuals’ personal data with my business partners (third parties)?

Go to Can I share a list of individuals’ personal data with my business partners (third parties)?

Can I transfer personal data outside the European Economic Area (EEA)?

Go to Can I transfer personal data outside the European Economic Area (EEA)?

Do data processors also have to respect the GDPR?

Go to Do data processors also have to respect the GDPR?

Do I need to be certified to become a Data Protection Officer (DPO)?

Go to Do I need to be certified to become a Data Protection Officer (DPO)?