SynavistraTogether we chart a path forward.

EU GDPR: Data Protection Rights and Obligations

Enforcement [gn500]
requires legal basis [kr001]
requires safeguards [kr002]
obligations protect [kr003]
violations trigger [kr004]
rights denied [kr005]
unlawful basis [kr006]
obligation breach [kr007]
additional layer for sensitive data [kr008]
heightened obligations [kr009]
transfer requires lawful basis + safeguards [kr010]
non-compliance triggers Tier 2 fines [kr011]
International Transfers (Ch. V) [gn600]
General Principle (Art. 44) [gn601]
Adequacy Decisions (Art. 45) [gn602]
Appropriate Safeguards (Art. 46) [gn603]
Binding Corporate Rules (Art. 47) [gn604]
Derogations (Art. 49) [gn605]
Special Categories (Art. 9) [gn250]
Special Categories Defined [gn251]
Conditions (Art. 9(2)) [gn252]
AI Training Implications [gn253]
Complaint to Authority [gn501]
Judicial Remedy [ke010]
Right to Compensation [gn503]
Fines: up to €10M / 2% [gn504]
Fines: up to €20M / 4% [gn505]
Data Subject Rights [gn400]
inaccurate? rectify [kr012]
no longer needed? erase [kr013]
can also object [kr014]
Right of Access [ke017]
Right to Rectification [ke021]
Right to Erasure [ke019]
Right to Data Portability [ke018]
Right to Object [ke020]
Right to Restriction [gn404]
Automated Decision-Making [ke003]
Controller Obligations [gn300]
risk found? notify [kr015]
if high risk, notify subjects [kr016]
Privacy by Design & Default [ke013]
Data Protection Impact Assessment [ke006]
Breach Notification (72h) [gn304]
Breach Notification to Subjects [gn311]
Processor Requirements [ke014]
Records of Processing [gn303]
Information at Collection [gn306]
Information from Third Party [gn307]
DPO Designation [gn308]
DPO Position [ke007]
DPO Tasks [ke008]
Lawful Bases [gn200]
Consent [ke004]
Contract Performance [gn202]
Legal Obligation [ke011]
Vital Interests [ke023]
Public Interest [ke015]
Legitimate Interests [ke012]
Principles [gn100]
Lawfulness, Fairness, Transparency [gn101]
Purpose Limitation [ke016]
Data Minimisation [ke005]
Accuracy [ke002]
Storage Limitation [ke022]
Integrity & Confidentiality [ke009]
Accountability [ke001]