-
@Vecchi_Paolo Data subject can only be an individual (GDPR not apply in other case), and so it can be under "domestic usage exclusion", and so not have to compliant or take GDPR into account.
-
@Vecchi_Paolo And that's for me the real difference between the 2 cases. On the direct portability case, we have one entity sending data to an individual not subject to GDPR in normal case. On indirect portability case, we have one entity sending data to another entity also GDPR compliant.
-
@Vecchi_Paolo In the 2nd case, i think the GDPR compliant source DC must/should/may refuse a direct send to another DC "obviously" not GDPR compliant and only send the data to the data subject. "Do what you want with that but I refuse to send those kind of personal data to an uncompliant DC"
aeris22’s Twitter Archive—№ 102,422