Privacy rights of employees are protected, if they are previously informed of the monitoring and a right balance of interests is achieved according to the Grand Chamber of the European Court of Human Rights. But is this decision compliant with the GDPR?
The Belgian Data Protection Authority recently published a template that can be used by organisations for meeting their obligation to keep a record of processing activities.
The determination of the data retention periods applicable to the different categories of processed personal data is a difficult quiz to solve under the GDPR.
Access by employees to customers' data has to be subject to stringent privacy restrictions and limitations according to a decision of the Italian data protection authority.
Interesting issues arose from the privacy related discussions at the Summer Legal Conference with major thought leaders on the GDPR obligations and their impact on businesses.
A decision of the Italian privacy authority on the illegal collection of data on criminal convictions of employees raised the issue on a practice that is quite common.