Controller and processor obligations under EU Data Protection Law

Under European Union (EU) data protection law, data protection is a fundamental right separate and independent from the right to privacy. The EU right to data protection is articulated in the EU Charter of Fundamental Rights, Article 8, which states:

Article 8 Protection of personal data

1.Everyone has the right to the protection of personal data concerning him or her.

2.Such data must be processed fairly for specified purposes and on the basis of the consent of the person concerned or some other legitimate basis laid down by law. Everyone has the right of access to data which has been collected concerning him or her, and the right to have it rectified.

3.Compliance with these rules shall be subject to control by an independent authority

This means that every individual is entitled to have personal data about them processed in a fair and legal way. In order to ensure effective protection, European data…