Analysis of personal data protection regulations (GDPR) – 5. Explanations related to getting the consent

Concerning the consent of the data subject, Regulation (EU) 2016/679 on the protection of individuals regarding the processing of personal data and the free movement of such data (GDPR) imposes conditions both in substance and in form.

Thus, the consent must:

• To be given through a free expression of will, specific, through an unambiguous action.
• To target all processing activities (explicitly) for the same purpose or for the same purposes.
• To be presented in such a form that is clearly distinguishable from other aspects (principally by a separate act).
• To be presented in an easily accessible and understandable form.
• To be presented in clear and easy to understand language.

In other words, the consent cannot be obtained anymore by ticking a box.

These are just a schematic and succinct presentation of the provisions of the new GDPR Regulation. For any questions or clarifications, please contact us by email at office@paulopol.ro.

How can we help you to implement GDPR correctly

We present you further on just a few examples of services you can get from the Paulopol Attorneys and Counselors Law Firm by outsourcing the Data Protection Officer (DPO), in order for you to implement GDPR correctly:

1. Specialized consulting on the protection of personal data.
2. Drafting or reviewing internal policies and data protection rules
3. Legal opinions on the measures to be taken in order to comply with the legal provisions.
4. Data protection audit based on the analysis of all operating regulations and internal policies.
5. Drawing up codes of conduct.
6. Database management consulting.
7. Drawing up the transfer policies of the databases.
8. Drafting and consulting on the implementation of policies on the protection of employees personal data,

These are just some of the services we can offer you related to GDPR. For details and legal assistance, please contact us by email at office@paulopol.ro.