Home
GDPR
EU AI Act
About

Sign in Subscribe

Topic

GDPR

A collection of 51 issues

What are "Special Categories of Data" under the GDPR?

Special category data receives enhanced protection under the GDPR due to its sensitive nature. This article explains what qualifies as special category data, the relationship between Articles 6 and 9, the Article 9 processing conditions, and the safeguards controllers should apply.

05 Feb 2019 3 min read

What is "Consent" under the GDPR?

What makes consent valid under the GDPR? This guide explains the legal requirements for obtaining valid consent, highlights the ICO's practical checklist for requesting consent, and explores the common mistakes that render consent invalid, with practical compliance tips for organizations.

31 Jan 2019 8 min read

What does “accuracy” mean under the GDPR?

The GDPR's accuracy principle requires organizations to ensure personal data is correct, up to date where necessary, and rectified or erased without delay when inaccurate. This article explains what "accuracy" means in practice, how to assess it, and the consequences of non-compliance.

22 Jan 2019 5 min read

What is “data minimization” under the GDPR?

The GDPR's data minimization principle requires organizations to process only the personal data that is adequate, relevant, and necessary for a specific purpose. Learn how to determine what is truly necessary, when additional data may be justified, and how this principle applies in practice.

22 Jan 2019 4 min read

What does “purpose limitation” mean under the GDPR?

There are seven basic data protection principles under EU data protection law. The second principle is the principle of “purpose limitation” (GDPR Article 5 (1) (b)). Article 5 of GDPR Personal data shall be: (b) collected for specified, explicit and legitimate purposes and not further processed in a manner that

22 Jan 2019 3 min read

What Does “Integrity and Confidentiality” Mean Under the GDPR?

The GDPR’s integrity and confidentiality principle requires organizations to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. Learn the risk-based security obligations and the technical and organizational measures required for compliance effectively.

22 Jan 2019 4 min read

What does “storage limitation” mean under the GDPR?

The GDPR's storage limitation principle requires organizations to keep personal data only as long as necessary for the purposes for which it was collected. This article explains retention periods, deletion, anonymization, archiving exceptions, and how to develop compliant retention policies.

22 Jan 2019 5 min read

What is an ‘establishment’ under EU law?

What constitutes an "establishment" under the GDPR? This article explains how EU law defines establishment, why the concept extends beyond branches and subsidiaries, and how CJEU case law determines when a non-EU organization has a sufficient presence to fall within the GDPR's scope.

03 Dec 2018 4 min read

What is a data subject?

Who is a "data subject" under the GDPR? This article explains who qualifies for protection, why legal persons and deceased individuals are generally excluded, and how the GDPR regulates the processing of personal data regardless of any relationship between the individual and the controller.

25 Nov 2018 1 min read

Territorial Scope of GDPR

When does the GDPR apply? This article explains the Regulation's territorial scope, including the establishment and targeting criteria, its extraterritorial reach, and why organizations outside the EU may still be subject to European data protection law.

24 Nov 2018 6 min read

Subscribe to The de la Torre Review

Don’t miss out on the latest issues. Sign up now to get access to the library of members-only issues.

jamie@example.com

The de la Torre Review © 2026

Sign up

Powered by Ghost