Do I need to do anything?

No. It’s up to companies and organisations to make sure that your personal data is protected. There are, however, still decisions you’ll need to make.

  • For new services you want to use: If the company is asking you to give them data, do you really want to agree? (If the service only processes necessary data, they are required to inform you but do not need to ask for special consent to do so. They do, however, need to ask for explicit consent when they want data that’s not necessary).

  • For the services you’re using at the moment: Are you still comfortable with the way the company or organisation collects, analyses and shares your personal data? If you no longer agree, you can simply say “no”.

  • Finally: if you think your rights are not being upheld, you can decide to report it to your DPA, or even challenge the company in court.