One of the aims of the General Data Protection Regulation (GDPR) is to empower individuals and give them control over their personal data. The GDPR has a chapter on the rights of data subjects (individuals) which includes the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and the right not to be subject to a decision based solely on automated processing.
EDPS' consultation on transfer of personal data to a processor established in the United States (Case 2016-0628)
Prior-check Opinion concerning the individual performance indicators for the annual evaluation of staff members at the Community Plant Variety Office (CPVO) (Case 2016-0417)
Personal data collected during an employer's core business activities are sometimes further used to produce productivity reports of employees to feed the evaluation process. This further use of personal data is a change of the initial purpose (linked to the core business) and should therefore be based on specific and explicit internal rules. Employees must be made aware of the change of purpose to ensure fair processing of their personal information. In addition, this information can only be used as a support tool for the annual evaluation of employees and not as the only source to feed the evaluation process.
EDPS' recommendations on the proposed European Border and Coast Guard Regulation
Prior Checking Opinion regarding Restrictive Measures (Sanctions) of the European External Action Service (EEAS) (Case 2014-0926)
EDPS response to the Commission public consultation on the regulatory environment for platforms, online intermediaries, data and cloud computing and the collaborative economy, 15 December 2015