Reliance on Public Disclosure by Data Subject Exception for Processing Special Categories of Personal Data, v1.0
Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(e).
Assessment Step
|
1
Reliance on Public Disclosure by Data Subject Exception for Processing Special Categories of Personal Data (RelianceonPublicDisclosurebyDataSubjectExceptionforProcessingSpecialCategoriesofPersonalData)
If and when the entity relies on the public disclosure exception as the lawful basis for processing special categories of personal data, does the processing relate to personal data that are manifestly made public by the data subject?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
|
Conformance Criteria (1)
|
Reliance on Public Disclosure by Data Subject Exception for Processing Special Categories of Personal Data
If the data controller relies on the public disclosure exception as the lawful basis for processing special categories of personal data, then the processing must relate to personal data that are manifestly made public by the data subject.
Citation
GDPR
Art. 9(2)(e), Recital 51
|