Processing is fully lawful if not prohibited by law and if specific conditions like consent, contractual necessity, or legal obligations are met.
Under what conditions is the processing of personal information considered lawful? Read More »
Processing sensitive personal information is prohibited unless strict exceptions like specific consent, legal mandates, or health and life protection apply.
Is the processing of sensitive personal information absolutely prohibited? Read More »
Controllers can legally subcontract data processing but remain entirely responsible for ensuring proper safeguards and strict confidentiality are maintained.
Can a personal information controller subcontract the processing of data? Read More »
Data subjects have the right to legally access the contents, specific sources, recipients, processing methods, and disclosure reasons of their data.
What is the right of the data subject regarding access to their personal information? Read More »
Data subjects can quickly dispute inaccurate personal data, compelling the controller to correct it immediately and officially inform third-party recipients.
Does a data subject have the right to correct inaccurate personal information? Read More »
Data portability actively allows subjects to obtain an electronic, structured copy of their processed personal data for their own further use.
What is the right to data portability? Read More »
Consent is a freely given, specific, informed indication of will, evidenced by written or recorded means, agreeing to data processing.
How does the Data Privacy Act define the consent of the data subject? Read More »
Controllers must strictly implement organizational, physical, and technical security measures to securely protect personal data from natural and human-induced threats.
What are the obligations of a personal information controller regarding data security? Read More »
Personal information is any data, recorded or not, from which an individual’s specific identity is apparent or can be reasonably ascertained.
What exactly constitutes personal information under the law? Read More »
A personal information controller is an entity that controls the collection or processing of personal data, excluding personal household use.
Who is considered a personal information controller? Read More »
