Exam 2024/2025 Already Graded A+

A case in which the European Court of Justice ruled that *a woman* who identified and *included information about fellow church volunteers on her website* was in *breach of the Data Protection Directive 95/46/EC*. The ECJ held that *the creation of a personal website was not a personal activity allowing the woman to be exempted from the data protection rules*. Some observers *wonder whether Recital 18* of the GDPR, which says *the law does not apply to the processing of personal data by a natural person in the course of a purely personal or household activity* and thus with no connection to a professional or commercial activity, *might affect this precedent ruling*. Recital 18 says personal or household activities could include correspondence and the holding of addresses, or social networking and online activity undertaken within the context of such activities. {Ans: Lindqvist Judgement}Contracting business processes, which may include the processing of personal information, to a third party. The GDPR establishes *direct legal obligations applicable to service providers acting as "processors"* and places an *increased emphasis* to the *contractual obligations* that must be *established* between *organizations* and their data *processing service providers*. {Ans: Outsourcing (EU-specific)}The standard is a *code