From 25.05.2018 DSGVO comes into force; what does it mean?
Roughly:
- Only personal data that is absolutely necessary for the activity may be stored/collected.
- Storing additional data must be justified.
- Data shall be secured as best as possible against unauthorized access & accidental deletion.
- The way is not prescribed here!
- Explanation of why / On what legal basis is data collected.
- for example, due to contractual relationship / maintenance contract – to specify which may access data.
- Always right of access / right to be forgotten.
