GDPR – Getting business cards at meetings…. How to process them

This is personal data if it identifies an individual e.g. someones name in which case the GDPR apply.

You must not do anything which the subject would not expect. So if you are handed a business card by all means make contact but do not under any circumstances add the person to a mailing list without asking for their consent and recording that you have done so.

This entry was posted in Data Protection, Information Risks, What we are being asked about and tagged , , . Bookmark the permalink.