EU General Data Protection Regulation (Regulation (EU) 2016/679)¶
Reference
Citation: European Union. "Regulation (EU) 2016/679 (General Data Protection Regulation)" (2016). Type: policy. Link: eur-lex.europa.eu.
What it is¶
The European Union regulation on the protection of personal data. Where processing rests on consent, the data subject has the right to withdraw it at any time (Article 7(3)), and a right to erasure of personal data (Article 17).
Role in the record¶
- Grounds BP10 (bp10-a5): consent is revocable and erasure is a right, so personal data held under withdrawable consent cannot be authorised for an irreversible use such as third-party model training or a perpetual licence.
Atom-level for/against detail and quotes are in the provenance data
(assets/provenance.yml), keyed by practice atom.