GDPR: Guiding Your Business To Compliance: A practical guide to meeting GDPR regulations. (Edition 2)

preventive or occupational medicine,

legitimate activities with appropriate safeguards by a

public health

Where a processor engages another processor for carrying out specific processing activities on behalf of the controller, the same data protection obligations as set out in the contract or other legal act between the controller and the processor as referred to in paragraph 3 shall be imposed on that other processor by way of a contract or other lega

The Member States, the supervisory authorities, the Board and the Commission shall encourage, in particular at Union level, the establishment of data protection certification mechanisms and of data protection seals and marks, for the purpose of demonstrating compliance with this Regulation of processing operations by controllers and processors. The

legal claims or

vital interests of the data subject or of another natural person

explicit consent to the processing of those personal data for one or more specified purposes,

Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers. They shall in a transparent manner determine their respective responsibilities for compliance with the obligations under this Regulation, in particular as regards the exercising of the rights of the data subject and their respectiv