European Data Protection Law and GDPR - Flashcard Set

Front

What is the definition of personal data under GDPR?

Back

Any information relating to an identified or identifiable individual natural person.

Front

What are the four building blocks of personal data according to WP29?

Back

1. Any information 2. Relating to 3. An identified or identifiable 4. Natural person

Front

What does the GDPR say about the nature of personal data?

Back

Any statements about a person, both objective and subjective, can be considered personal data.

Front

What is the significance of the 'relating to' building block in personal data?

Back

Information must relate to an individual, which can include information about objects or events under certain conditions.

Front

What does 'identified or identifiable' mean in the context of personal data?

Back

A natural person is identifiable if they can be identified directly or indirectly through identifiers.

Front

What is the difference between anonymisation and pseudonymisation under GDPR?

Back

Anonymisation means the data subject is no longer identifiable, while pseudonymisation allows data to be linked to an individual with additional information.

Front

What are the special categories of personal data under GDPR?

Back

1. Racial or ethnic origin 2. Political opinions 3. Religious or philosophical beliefs 4. Trade union membership 5. Genetic data 6. Biometric data for unique identification 7. Health data 8. Data concerning a natural person's sex life or sexual orientation.

Front

What is a data controller according to GDPR?

Back

A natural or legal person, public authority, agency, or other body that determines the purposes and means of processing personal data.

Front

What is a data processor?

Back

A person or entity that processes personal data on behalf of a controller.

Front

What is the primary obligation of a data processor when aware of a personal data breach?

Back

The processor must notify the data controller without undue delay.