Freedelity

What happened

The DPA reprimanded a tech company for the centralised storage and disclosure of end-customers’ data to different retail companies. This practice violated the principles of data minimization, storage limitation, accountability, as well as data protection by default and by design.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(c) · 5(1)(e) · 5(2)Read →
• Art. 7Conditions for consent7(3)Read →
• Art. 24Responsibility of the controllerRead →
• Art. 25Data protection by design and by default25(1)Read →
• Art. 26Joint controllersRead →

• Accountability
• Consent
• Data principles