Reliance on Vital Interests Exception for Processing Special Categories of Personal Data, v1.0
Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(c).
Assessment Step
|
1
Reliance on Vital Interests Exception for Processing Special Categories of Personal Data (RelianceonVitalInterestsExceptionforProcessingSpecialCategoriesofPersonalData)
If and when the entity relies on the vital interests exception as the lawful basis for processing special categories of personal data, is the processing necessary to protect the vital interests of the data subject or another natural person, and is the data subject physically or legally incapable of giving consent?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
|
Conformance Criteria (1)
|
Reliance on Vital Interests Exception for Processing Special Categories of Personal Data
If the data controller relies on the vital interests exception as the lawful basis for processing special categories of personal data, then the processing must be necessary to protect the vital interests of the data subject or another natural person, and the data subject must be physically or legally incapable of giving consent.
Citation
GDPR
Art. 9(2)(c), Recital 46
|