Implementation date 25th May 2018
Guidelines
The EU Article 29 Working Party (WP29) has recently published guidelines on the obligation of transparency concerning the processing of personal data under the GDPR. The concept of transparency appears as one of six principles that must be adhered to when processing data, but no actual definition has been provided under the GDPR.
Personal data must be processed in a “transparent manner” under Article 5(1)(a) of the GDPR. This is in addition to the other requirements that personal data must be processed lawfully and fairly as set out in that sub-article. Transparency is also intrinsically linked to the new principle of accountability under the GDPR. It follows from Article 5(2) that the data controller must be able to demonstrate that personal data is processed in a transparent manner with respect to the data subject.
The obligation applies to three central areas:
Relevant articles relating to transparency under the GDPR include: 5.1(a), 12, 13, 14.
Relevant recitals relating to transparency under the GDPR include: 39, 58, 59, 60, 61, 62.
According to the guidelines, in order to comply with the obligation of transparency, businesses should:
For any queries, please contact Anne O’Connell Solicitors at info@aocsolicitor.ie or +353 1 2903580
21st December 2017
Anne O’Connell
Solicitors
1-3 Burton Hall Road
Sandyford
Dublin 18
www.aocsolicitors.ie
If you found this article useful you might like our employment law newsletter. We write monthly articles, like this, covering interesting cases, decisions, news and developments in Ireland.