EU Data Protection Law Framework

In the previous chapter, we have discussed several basic concepts of data protection, which are personal data, the data controller and legal basis of processing (including consent, legitimate interests and the necessity for the performance of a contract). A data controller who processes personal data must have a legal basis for processing. This chapter delves into the requirement of consent as a legal basis for processing. It also discusses the principles of processing that a data controller must observe when processing personal data. Finally, it discusses exceptions under the data protection framework, including the personal or household exemption and the journalistic purpose exemption.