Material Requirements
摘要
The processing of personal data under the GDPR is generally prohibited unless it is expressly permitted. Companies must carefully assess which legal bases are applicable to the ongoing data processing. This assessment must also be carried out if data is only shared within a company group. For certain processing constellations, additional requirements must be met, e.g. when processing special categories of personal data or in the event of a change in the purpose of processing. This chapter provides explanations and practical advice on the legal bases for data processing and how additional material requirements of the GDPR can be met, e.g. in the case of data transfers to third countries.