Opportunity or Restriction?

  • Comments posted to this topic are about the item Opportunity or Restriction?

  • We'll need to help our organization extract more value from the data we are allowed to hold, meaning those of us that are data professionals will become more important. At least, that's what I hope happens.

    You need to pay attention to the fact that you may not be allowed to process data in any other way ("extracting more value") or at least not for any other purpose than was originally agreed upon.
    The fact that your organization has the lawful right (or obligation) to keep a certain set of personal data doesn't mean that you are allowed to use it at your own (or your organization's) will.

    https://gdpr-info.eu/art-6-gdpr/
    Article 6, (4)

  • There's some truth here, but certainly organizations will stretch this and solicitors/lawyers will need to argue it out.

    If you disclose the purpose, or you disclose a new purpose, you should be able to process data in new ways. This could mean you need data sets, but that's fine. We can work to archive old data, gather new data with a transparent, disclosed purpose. That's opportunity for us, as data professionals working in business.

  • What can be read out of GDPR right now, an organization can not just disclose a new purpose. Changing the purpose means you've got to get the explicit consent from every  person that is involved in the data processing that is to be done. And also: the purpose has to be very clear.
    Working with the data in the way that was originally agreed upon is of course no problem, nor dealing with other aspects of the GDPR, such as erasing data when it gets too old or upon request.
    I agree with your first sentence! And my belief is that the GDPR will get so stretched and bent in some years, that there is not much left of it.

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply