Rules for obtaining valid consent to use personal information will become much tougher when the GDPR comes into the force. Therefore, companies must ensure that consent is clear, affirmative, and in plain language. Companies must also make it easy for data subjects to withdraw content if they wish to do so.
Records of processing activities in GDPR Article 30
What are the records of processing activities (ROPA)? Article 30 of the EU General Data Protection Regulation (GDPR) requires organisations to maintain internal records, which