Search results

All organisations must comply with the applicable data protection legislation when processing personal data, regardless if you are a public authority, a small company or an association.

Throughout your life, personal information about you is recorded. Whether you shop online, use social media, or sign up for an insurance policy, you leave behind personal information. This brings various types of risks, from harassment online to identity theft.

You can submit a whistleblower report to IMY if you have information that the organisation you currently work for, have previously worked for or have applied to work for, is violating the General Data Protection Regulation (GDPR) or supplementary national legislation like the Data Protection Act.

The General Data Protection Regulation (GDPR) strengthens your rights and helps you take control of how your personal data is used.

All businesses that handle personal data must comply with the General Data Protection Regulation (GDPR). This means, among other things, that you need to follow the fundamental principles, ensure that the processing has a lawful ground and inform the data subjects about how you handle their personal data.

Yes, it does not matter where the data subject is located in your assessment of whether or not you need to notify the breach to a data protection authority. If you are established in the EU/EEA, the G

Personal data shall not be kept longer than necessary for the purposes of the processing. When the purposes of a particular data processing are fulfilled, the main rule is therefore that the data in q

No, you do not need to notify all personal data breaches to IMY. If the breach is unlikely to result in a risk to the rights and freedoms of natural persons, it does not need to be reported to us. Eve

Read about the data subject's rights according to the GDPR.

The General Data Protection Regulation (GDPR) gives you several rights. Here you can find out more about what they are and how to exercise them.