General Data Protection Regulation

European Union. (2016). General Data Protection Regulation.

Type

Legislation

Intellectual base

Primary research

Year

2016

Link

https://gdpr-info.eu/art-25-gdpr/

Cited from

security_intelligence

Cited by

2 citations across 2 artifacts.

Each citation links to the sentence it supports in the citing article.

Primes

• Consent

  • This source7 (conditions for consent). Requires consent be freely given, specific, informed, and unambiguous, with the controller bearing the burden of proof and withdrawal as easy as giving; underpins the GDPR consent-validity discussion. (Bibliography only — link added.)

• Minimum-Necessary Disclosure
  • Regulatory regimes — GDPR data minimization; HIPAA's minimum-necessary rule; data-protection-by-design.

    This sourceRegulatory mandates requiring that personal/health data delivered be limited to what is necessary for the purpose — disclosure minimized at source by role.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Links previously used in the corpus

Before the registry existed this work was also linked 1 other way.

• https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/minimum-necessary-requirement/index.html ×1

Registry ID ref:39b9ceb8f059 · see in the full table