Exchange of Data with Third Parties

GDPR is very restrictive when it comes to exchange of data with third parties.

GDPR does not allow exchange of data with third parties who do not comply with the requirements of GDPR.

For the second party (the organisation) to exchange person data, the second party needs a specific consent for this exchange from the first party (the natural person).

However, even a consent from the data owner (the natural person) does not overrule or exempt the requirements of GDPR for the third party. The second party (the organisation) can and can only get a valid consent for third parties complying with GDPR. It is the responsibility of the second party to ensure that the third party is complying with GDPR.

Finally, any third party getting data from a second party (the organisation) must delete the person data on request from the first party (the natural person) to the second party (the organisation).





Oops

Your browser is not supported

A modern browser with Javascript ES6 is required

Any major browser from 2015 onwards will be suitable