Home
GDPR
EU AI Act
About

Sign in Subscribe

Topic

GDPR

A collection of 51 issues

What is the "Right of Access" under the GDPR?

The GDPR's right of access empowers individuals to obtain a copy of their personal data and understand how it is being used. This article explains Article 15, Subject Access Requests (SARs), response deadlines, exceptions, best practices, and practical compliance guidance for organizations.

22 Feb 2019 9 min read

What is the "Right to Rectification" under the GDPR?

The GDPR's right to rectification allows individuals to have inaccurate personal data corrected and incomplete data completed. This article explains Article 16, how to handle rectification requests, response deadlines, verification requirements, and when controllers may refuse a request.

22 Feb 2019 6 min read

What is the "Right to Restrict Processing" under the GDPR?

The GDPR's right to restrict processing allows individuals to require organizations to temporarily limit the use of their personal data. This article explains Article 18 GDPR, when the right applies, controller obligations, exceptions, deadlines, and practical compliance tips.

22 Feb 2019 10 min read

What Is the “Right to Be Informed” Under the GDPR?

The GDPR's right to be informed requires organizations to be transparent about how they collect, use, and share personal data. This article explains Articles 13 and 14, outlines key disclosure requirements, highlights best practices, and examines the main exceptions to this obligation.

21 Feb 2019 6 min read

What is the "Right to Erasure" (or "Right to be Forgotten") under the GDPR?

The GDPR's right to erasure, also known as the right to be forgotten, allows individuals to request the deletion of their personal data in specific circumstances. This guide explains when the right applies, its exceptions, controllers' obligations, response deadlines, and practical compliance tips.

21 Feb 2019 9 min read

What are "Legitimate Interests" under the GDPR?

Legitimate interests is the GDPR's most flexible lawful basis, but it requires careful analysis. This practical checklist walks through the Legitimate Interests Assessment (LIA), balancing test, documentation requirements, and safeguards organizations should consider before relying on this basis.

05 Feb 2019 8 min read

What is "Public Task" under the GDPR?

The GDPR's public task lawful basis permits processing when it is necessary to perform a task in the public interest or exercise official authority established by law. Learn who can rely on this basis, its legal requirements, the necessity test, and the documentation controllers should maintain.

05 Feb 2019 2 min read

What is "Vital Interest" under the GDPR?

The GDPR's vital interests lawful basis is reserved for exceptional situations where processing is necessary to protect someone's life. Learn when this narrow legal basis applies, why necessity is essential, its limits for special category data, and the documentation controllers should maintain.

05 Feb 2019 2 min read

What is "Legal Obligation" under the GDPR?

The GDPR's legal obligation lawful basis allows organizations to process personal data when doing so is necessary to comply with an obligation imposed by EU or Member State law. Learn when it applies, why contracts alone are insufficient, and the documentation organizations should maintain.

05 Feb 2019 2 min read

What is "Contractual Necessity" under the GDPR?

When can organizations rely on contractual necessity as a lawful basis under the GDPR? This article explains when Article 6(1)(b) applies, what qualifies as a contract, why necessity must be interpreted narrowly, and the common mistakes organizations make when relying on this lawful basis.

05 Feb 2019 4 min read

Subscribe to The de la Torre Review

Don’t miss out on the latest issues. Sign up now to get access to the library of members-only issues.

jamie@example.com

The de la Torre Review © 2026

Sign up

Powered by Ghost