
User rights concerning their personal data (2)
The right to access, to portability and to rectify their data have in common that the user does not question the processing of his data. It simply represent his right of review on his data.
The right to access, to portability and to rectify their data have in common that the user does not question the processing of his data. It simply represent his right of review on his data.
The rights users have on their data are not absolute. As such, it is important for data controller to know how they must react to a request to exercise one.
This article is a brief overview of user rights, and is part of a series of articles about user rights that will give further information on how to ensure data controllers respect those rights better.
Article 5(3) of Directive 2002/58/EC, amended in 2009, transposed into French law by Article 82 of the Data Protection Act, establishes the principle of prior consent of the user before storing information on his or her terminal or accessing information already stored on it
Cookies are tracers that allow companies to collect data on the navigation of Internet users on the web.
How does it work?
During navigation, files can be stored by the server in the Internet user’s browser in order to collect data on web navigation.
According to the GDPR the required information must be communicated in a concise, transparent, understandable and easily accessible way, in clear and simple terms.
The EDPB’s guidelines recall that transparency helps “build trust in the processes applicable to citizens by enabling them to understand and, where necessary, challenge those processes.
Archiving is a legal obligation for companies.
Indeed, they must be able to present the documents to justify the operations in case of a tax audit or a dispute. This is why certain documents must be kept for a period of time stipulated by law.
The purpose of backup is to restore data and systems in the event of a system anomaly, in order to limit the risks of loss and correction of data or these systems, whereas the purpose of electronic archiving is the conservation of information in order to guarantee its continuity,
How to define an archiving policy?
Like any action plan, an archiving policy involves asking the right questions.
First of all, companies must ask themselves about the needs of the organization.
This means determining the scope of archiving and the volume of data to be archived.