Veri­fi­ca­ti­on of iden­ti­ty in accordance with the GDPR when satis­fy­ing the rights of data subjects

Artic­le by Dr. Car­lo Piltz and Mela­nie Pradel in the cur­rent edi­ti­on of BvD-News

“It must be ensu­red that the reques­ted data is not made available to unaut­ho­ri­zed third par­ties. This is to be ensu­red par­ti­cu­lar­ly in cases when infor­ma­ti­on is pro­vi­ded ver­bal­ly or elec­tro­ni­cal­ly. If the con­trol­ler has reasonable doubts con­cer­ning the iden­ti­ty of a per­son reques­t­ing infor­ma­ti­on, it may request addi­tio­nal infor­ma­ti­on to con­firm the person’s iden­ti­ty in accordance with Artic­le 12(6) of the GDPR.” Dr. Car­lo Piltz & Mela­nie Pradel wri­te about the gene­ral duty to veri­fy iden­ti­ty in the latest edi­ti­on of BVD-News (the indus­try jour­nal of the Ger­man Asso­cia­ti­on of Data Pro­tec­tion Officers).

Read artic­le online