Data Collection · Consent and basis · Component
The basis
What entitles the organisation to hold each data set — recorded per set, because each basis has different consequences.
The deliverable
What it is
Consent, contract, legitimate interest and legal obligation permit different things and impose different obligations. Recording which applies is what makes a later question answerable.
Consent is the most demanding basis and the one most often assumed. Where it is used, it has to be freely given, specific and withdrawable, and the withdrawal has to actually work.
One level in
What it is made of
Each element is a constituent part of the component. Follow one to see the attributes it carries.
The consequences
What the basis permits and requires.
3 attributes: Permits · Requires · Withdrawable
Learn
Data collected for one purpose and now used for another may have no valid basis at all.
The other components in consent and basis
The purpose
What it was collected for, which constrains what it may be used for — because the useful new analysis is frequently the one that would breach it.
LearnThe notice
What people were told, and whether practice still matches it — because the notice is a commitment regardless of who reads it.
Learn