Required consent

2. Similarly, xxx’s other clients which are case study participants- they share their personal data with xxx.
3. Do we require their consent?
4. GDPR implementation’s deadline was in MAY .What kind of an impact does that have ?

Answers:

1. Consent would be required if you are targeting individuals an not companies and usually when the email notification refers to advertisement. If the notifications are used to communicate based on an existing contract with a customer then the consent is not required as the legal grounds for processing would be “contractual obligation”. The EU GDPR does not require a specific process to obtain consent. You just need to ensure that consent is freely given, specific, informed and unambiguous indication of the individual’s wishes. As data controller you must keep records so you can demonstrate that consent has been given by the relevant individual.
2. Using an attorney at law is entirely up to you such thing is not regulated in the EU GDPR.
3. If the sharing and processing of personal data is based on a contract then consent is not required as the legal grounds for processing is “contract obligations”
4. Question is much to broad to be addressed as the impact is different based on the processing activities of each individual company. The impact is that all companies which are processing personal data and fall under the GDPR need to comply with specific requirements or they risk being fined with up to 4% of their turnover.

To learn more about the EU GDPR check out our “EU GDPR Foundation Course” (https://advisera.com/training/eu-gdpr-foundations-course//)