persondataret

Persondataret is a term used in Nordic and European legal discourse to describe the body of law and practice governing how personal data may be collected, stored, and used. It applies to both private and public sector entities that handle information about identifiable individuals, as well as to individuals who have certain rights regarding their data.

Historically rooted in early data protection movements, the concept has been shaped by international norms and by the EU's data protection framework. The General Data Protection Regulation (GDPR) provides a harmonized baseline for processing personal data across member states, while national laws add specifics related to enforcement, oversight, and sectoral rules.

Core principles of persondataret include lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability of data controllers and processors.

Data subject rights under persondataret commonly include access to personal data, rectification, erasure (the right to be forgotten), restriction of processing, data portability, objection to processing, and safeguards against automated decision-making and profiling. Rights may be exercised through data controllers, with remedies available through supervisory authorities and courts when needed.

Practically, compliance involves design and organization measures such as data protection impact assessments, data mapping, security controls, consent management where appropriate, and clear data breach notification procedures. Cross-border data transfers are subject to restrictions and adequacy decisions.

See also: data protection, privacy, GDPR, data controller, data processor.