Data provenance development in midPoint has reached its second milestone. While we are not at the end yet, there is already a pile of interesting materials to have a look at. There are good news, but there are also not so good news. […]
MidPoint user group meeting on TIIME Workshop in Vienna is getting close. TIIME is an unconference with a lot of variability and improvisation. Nevertheless, we have prepared some topics for discussions. We will start Monday morning with two presentations: The state of midPoint by Radovan Semančík. I will summarize recent releases development works and plans Read more about TIIME 2020 Topics[…]
As the entry into force of the GDPR approaches, we continue in our search for the most appropriate lawful basis and assess each requirement. The most discussed kind of legal basis is “legitimate interests”. It is the most flexible one and is designated for various situations, where the others obviously don’t fit. Nevertheless, you cannot Read more about Lawful basis Part II.[…]
Time is running out. There are just few months left to the implementation of the European Commission’s General Data Protection Regulation (GDPR) on 25th May 2018. The main question is: are companies truly prepared? Well, maybe you will be surprised what recent studies have to say about that. […]
On the way to the practical side of the GDPR we need to recognize reasons for processing the personal data, officially known as lawful basis. It has been long time since the data processing had been uncontrolled. You have needed lawful basis since the directive had come into effect, but under the GDPR there is Read more about Lawful basis Part I.[…]
The first thing that most likely comes to the mind when people hear about GDPR is “consent”. That is understandable, as better part of the buzz around GDPR is about customer identities and digital marketing. But this emphasis on consumer identities is casting shadow on other aspects of GDPR that are at least as much important as consent. One of the aspects of GDPR is affecting much larger range of organizations than consent does. In fact almost every organization is affected by it. I’m talking about management of lawful bases for data processing. […]
Consent under the GDPR looks like really complex and complicated issue. Let’s see what we can already clearly explain. To achieve all stated requirements, you need to structure the consent granularly and give data subjects some options. Consent must be “specific”. Blanket consent without stating the exact purpose is not valid, but the GDPR does Read more about GDPR – Consent part II.[…]
As we are getting closer to the practical side of processing personal data under the GDPR, firstly we need to understand the reason of processing expressed in lawful basis. The first and most discussed basis is obviously a consent. Today we will identify the nature, characteristics and features of the consent needed to process personal Read more about GDPR – Consent part I.[…]