A “purpose”​ element: what is inside the controller’s mind?

In 'Opinion 4/2007' on the concept of personal data, Working Party 29 ('WP29’) identified four building blocks in the definition of personal data - ‘any information’, ‘relating to’, identified or identifiable’, ‘natural person’. They remained the same in the GDPR, thus rendering ‘Opinion 4/2007’ relevant for understanding the concept of personal data.  However, WP29, instead … Continue reading A “purpose”​ element: what is inside the controller’s mind?