ABSTRACT

The rights to respect private life and personal data protection are closely related since both of them defend similar values. Identity resolution enables an organisation to analyse the identity of a particular individual or entity based on its available data records and attributes. Organisations will have to adapt to a new controlled consent procedure, allowing them to store and use individual personal data. The General Data Protection Regulation (GDPR) also includes requirements for making a valid request for consent. The GDPR can have a substantial impact on companies that fail to comply with it. The supervisory authorities can take one or more measures listed in the GDPR, such as to issue a warning or impose a temporary and/or definitive ban on the processing of personal data, and/or impose a fine. A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration and unauthorised disclosure of or access to personal data.