Control Strategy GDPRArt.9.2c.ConsentIfAble

URI: CSG-GDPR-Art9-2-c-p

Package: GDPR

< prev | next >

Description: Processing of special category data Data to protect vital interests must have the consent of the data subject DataSubject if they are in a position to make a consent decision. One must check their competence to make such a decision, and provide an interface that explains the purpose of processing. Enforcement can be handled by the DataSubject if they control the storage device, consent being inferred if they allow access. If they are not able to provide a consent decision, it is legal to take their device and access it outside their control.

Blocked Threats (1)

P.GDPR.HuSDPoS-i.9

Condition for processing special category data Data related to DataSubject: since the data Data being processed is special category data, it may be necessary to obtain consent from the data subject DataSubject even if the legal basis for processing is not based on consent.