GDPR Insights

  • TYPE: Workshop DATE: Friday, May 18, 2018 TIME: 13:30-16:00 LOCATION: AMMERSEE II
Friday Workshops

GDPR - Compliant Data Processing Within (Multinational) Corporations

Is there something like a „group privilege“ regarding data processing in between the legal entities of a corporation, which of course would be very helpful? National laws in effect to date in Member States do generally not provide for a „group privilege“ for corporate groups. Neither does the GDPR, at least not explicitely. GDPR does, however, privilege internal administrative purposes and therefore does make data transfers easier in this context.

With the GDPR coming into effect corporate groups can make use of this opportunity. To do so, you will need to elaborate and document your group wide data streams. Then you will need to evaluate why those data streams occur and what they mean to the data subjects. This will enable corporations to assess where or not and what kind of legitimate interests they have have to justify those data streams.

Depending on your findings you will then have to identify and implement relevant communications, declarations and agreements required to implement GDPR-compliant data processing within the legal entities of a corporation.

Key Takeaways:

  • Overview of data processing between the legal entities of a corporation under the GDPR regime
  • Practical approaches to enabling GDPR-compliant legitimate interests in transmitting personal data within corporations
  • Identification of communications, declarations and agreements that may be required to implement group wide data processing in this context

Log in to download the presentation:  


Fabian Bauer is attorney at law (Germany) at Kanzlei | Naumann with areas of practice in IT law, media and copyright law. In particular, he advises businesses in the field of data protection, new media and digital transformation. Mr Bauer studied law at the Universities of Passau / Germany...

Frank Naumann, LL.M., Attorney at Law (Germany), advises on matters of information technology and licensing law. His practice ranges from privacy & data protection issues to the protection and exploitation of intellectual property; and beyond to accompanying trademark portfolios and...

Session Links

Munich, Germany


European Identity & Cloud Conference 2018

Registration fee:
€1980.00 $2475.00 S$3168.00 21780.00 kr
Mastercard Visa American Express PayPal INVOICE
Contact person:

Mr. Levent Kara
+49 211 23707710
  • May 15 - 18, 2018 Munich, Germany