Glossary A–ZLetter G
GDPR
The GDPR (General Data Protection Regulation, Regulation (EU) 2016/679) governs throughout the EU under which conditions personal data may be processed.
It has applied since 25 May 2018. Personal data is any information relating to an identified or identifiable person.
Screens themselves often show no personal data, but much around them does: user accounts and login logs in the management software, names or numbers called in a waiting room, photos of staff, cameras or sensors for audience detection, and remote screenshots. Each of these processing operations needs a purpose, a legal basis, transparency towards the people concerned and appropriate safeguards. Anyone using a service provider will usually conclude a data processing agreement.
Data minimisation helps most: what is not collected does not need protecting. Logs need a deletion period, cameras a careful assessment. The GDPR does not ban displaying names across the board; whether something is permissible depends on the individual case. Where there is doubt, the data protection officer or the competent supervisory authority is the right point of contact. This explanation is not legal advice.