As many readers will be aware, the European Union General Data Protection
Regulation (GDPR) came into effect in May 2018. Since the
introduction of the regulation, there have been a range of
interesting developments, some of which this piece takes a close
look at.
First civil decision - Whois
In civil proceedings between two private companies, a German
court held that data collection exceeding that which is necessary
to achieve legitimate business purposes violates one of the basic
tenets of the GDPR as set out in Article 5, and that one company
cannot compel the other to act in breach of such a tenet.
Article 5 under the
GDPR states that personal data collection shall be
"for specified, explicit and legitimate purposes and not
further processed in a manner that is incompatible with those
purposes".
