In one year's time, the General Data Protection Regulation ("the Regulation") will apply. Many organizations are already preparing for this new privacy law.
Naturally, several questions arise during preparations for the Regulation. Does my organization need a data protection officer? What must a processor agreement comply with under the Regulation? What does the right to be forgotten mean? At the end of May, the Personal Data Authority (hereinafter "the AP") therefore announced to answer the three most frequently asked questions each week.
This week, the AP explains (i) whether, under the Regulation, you may engage in direct marketing without the recipient's consent, (ii) whether the Regulation also applies to small SMEs and sole proprietors, and (iii) what a data protection officer needs to know and be able to do.
More articles by SOLV Lawyers
