Get a 20% discount on the first year of the Company Training Academy annual plan.
Limited-time offer – ends April 24, 2025
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Transfer of data
1. We are an outsourcing company and handle multiple clients. The clients are the data controllers and we are the processor. For one of our clients, we send their data outside the EU (India). This is a requirement for us to do and is set out in our work contract. Am I correct in saying that all we need to be able to do this is prior written consent from the controller in the agreed contract? i.e there is no need for us to have third-country clauses? -
GDPR and hosting events
1. I am developing an event website and my main question is about posting the events. Is it considered public information the name, time and prices of those events posted on the bars, clubs and venue's website? -
Medical data and GDPR
1. Does the GDPR restrict hospitals in any way from encrypting and sending their patient data to a third party? -
EU GDPR and doctors
1. We consult a local hospital regarding issues pertaining to GDPR. Does the hospital administration need to sign a confidentiality agreement with the doctors? Or theoretically, doctors are covered by their code of ethics? -
Gateway payment provider
1. I'm confused as to why gateway payment providers are considered controllers since they need to process our customer's data by sending the invoices to them? -
Supervisory authority and extra-territorial provisions
Let's imagine that there is a company outside of EU, who offers products and services for EU customers. Of course, this company needs to comply with GDPR. But what happens if this company decides not to comply with GDPR? How can Supervisor Authorities act in this context? -
GDPR officer
Should a GDPR officer have a legal background? -
GDPR & Brexit
GDPR & Brexit - What will this look like? -
Data transfer from EU to US
Data transfer from EU to US? Is SSL sufficient to protect data in transit? -
Privacy Shield and EU
What's missing from Privacy Shield to be considered data safe by the EU?