Dastra's Blog: GDPR, Privacy & Cybersecurity News

How can the compatibility of purposes be assessed in the event of subsequent processing?

The basis of all data processing lies in the principle of purpose, a principle which also applies at the stage of re-use...

[Factsheet] Informing people according to the GDPR: the transparency principle

Informing individuals, or the principle of transparency, is an obligation under the GDPR. When should this information b...

GDPR: how to assess the legitimate interests in a processing operation? Our checklist🗒️

In this article, we propose a questionnaire for documenting the justification of the "legitimate interests" legal basis ...

The 8 Golden Rules of Data Protection

Any processing of personal data must comply with certain conditions: these are the 8 golden rules of data privacy. This ...

GDPR and web scraping: a legal practice?

To scrape or not to scrape a website?

What security measures should be applied under the GDPR?

This article sets out the obligations of data controllers and processors and provides numerous examples of how to implem...

Mandatory or optional appointment of a DPO?

Mandatory appointment of a DPO

Protection of sensitive data

As early as 1974, civil society became aware that certain data, known as "sensitive" data, needed greater protection.

What are my obligations as a data controller?

In this article, we look at the data controller's obligations under the General Data Protection Regulation (GDPR).

Dastra in TNP's benchmark of DPO tools

The 5th edition of TNP's benchmark of market solutions focused on data protection and privacy compliance is out!

Data protection impact assessment (PIA or DPIA)

This guide explains what a data protection impact assessment is, when one is required and how it should be carried out.

Release note 1.6.3

New logo, processing control filters, organizational unit transfers! Discover the new version 1.6.3!