Public sector ‘cannot rely on consent as a legal basis’ for GDPR compliance, warns ICO

Government entities urged to explore one of the four other options available for establishing the lawfulness of data processing

The Information Commissioner’s Office has warned public sector organisations that they “cannot rely on consent as a legal basis” for meeting their obligations under the incoming EU General Data Protection Regulation.

With the implementation of GDPR less than six months away, one of the key requirements facing public-sector data-controllers is establishing the lawfulness of their data-processing operations to a standard that satisfies regulators. The first option for doing so is to obtain the consent of the individual whose data is being processed – commonly referred to as a data subject.

https://publictechnology.net/articles/news/public-sector-%E2%80%98cannot-rely-consent-legal-basis%E2%80%99-gdpr-compliance-warns-ico