Abstract:

The companies collecting, processing and utilising personal data are required to comply with the data privacy legislation. Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data. Every act of processing is in need of a legal basis, making it the controller’s duty to make sure that and declare which one of the legal grounds listed in the provision applies. The GDPR, an European law, is applicable to any organisation that uses data containing personal information and stipulates several conditions and obligations that must be fulfilled towards its compliance. One of its important obligations is the mechanism of consent given by the data subject which is required for all personal data and activities deemed non-essential to the provided services.

Keywords:

GDPR, personal data, lawfulness of processing, consent.