Quote
"Internet intermediaries should limit the processing of personal user data to what is necessary in the context of a clearly defined purpose, which is explicitly communicated to all users in a proactive manner. The processing, including collection, retention, aggregation, storage, adaptation, alteration, linking or sharing of personal data shall be based on the free, specific, informed and unambiguous consent of the user, with respect to a specific purpose, or on another legitimate basis laid down by law, as prescribed by Convention 108."
Cite
Cite
Document
CoE (Committee of Ministers): Recommendation Rec(2018)2 of the Committee of Ministers to Member States on the Roles and Responsibilities of Internet Intermediaries, para. 2.4.2Summaries
- Personal data should only be collected for specified and legitimate purposes.
- Collection of personal data should be minimized, relevant, and limited to purposes pursued.
- Unless provided for by law, or necessary to deliver a service or for other legitimate purposes, personal information may only be used based on informed consent.
- Personal data controllers should provide clear and easily accessible information about their data collection and processing policies and practices.