← back to the act's dossier

GDPR — Article 11

The article's text

Article 11 Processing which does not require identification 1. If the purposes for which a controller processes personal data do not or do no longer require the identification of a data subject by the controller, the controller shall not be obliged to maintain, acquire or process additional information in order to identify the data subject for the sole purpose of complying with this Regulation. 2. Where, in cases referred to in paragraph 1 of this Article, the controller is able to demonstrate that it is not in a position to identify the data subject, the controller shall inform the data subject accordingly, if possible. In such cases, Articles 15 to 20 shall not apply except where the data subject, for the purpose of exercising his or her rights under those articles, provides additional information enabling his or her identification. CHAPTER III Rights of the data subject Section 1 Transparency and modalities

Who wrote about this article in the consultations

Filers who named this exact article number in their own text. It is their sentence, not our reading — and not a causal claim.

7
business association
3
ACADEMIC_RESEARCH_INSTITTUTION
2
other
1
NGO
1
company
WhoCountryWhat they wrote
MyData-TRUSTBEwithin Article 11 are frequently confused with anonymisation, while anonymous data are not even under the regulation. On the other hand, certain techniques make it even more difficult to inform the data subject about the relationship that exists between de-ide
Selbstregulierung Informationswirtschaft e.V. (SRIW)DEprotection is, where data is not processed at all. GDPR already engraves this principle, e.g., in Art. 11.1 GDPR. Data subject rights may also be performed abusively, which is acknowledged by GDPR, e.g., in Art. 12.6 or Art. 12.5 GDPR. Art. 12.6 clarifies that
FIBEP Event und Management GmbHATIn fact, MMO’s work to enhance the value and relevance of journalists and the media because it is good business. Moreover, Article 11 of the EU Charter of Fundamental Rights articulates that companies have rights to freedom of expression and information, which
Alliance DigitaleFRd data. Given the non- identifying nature of this data, we believe that this data should be explicitly excluded from the scope of Article 11 of the GDPR II.
Anonos Inc.USnd 67. 3 • Separate Processing Benefits from Identity Requirements [Articles 11(2) and 12(2)] a. Pseudonymization helps to enable Article 11(2) relaxation of obligations to data subjects under Articles 15 (Right of Access by Data Subject), 16 (Right to Rectifi
ITI - Information Technology Industry CouncilUSterms of legal certainty, cross-border complaints should be automatically closed not only if the complainant, as now provided in Article 11 of the proposal, but also the SA with which the complaint was lodged fails to respond within a defined period.
Hans-Hermann SchildDE-E einen Monat nicht unterschreiten. Auch dürfte die Frist, innerhalb derer der Beschwerdeführer seinen Standpunkt darlegen soll (Art. 11 Abs. 2 S. 2 VO-E), mit „mindestens drei Wochen“ unter dem Gesichtspunkt des effek- tiven Rechtsschutzes ebenfalls zu knapp
noybATrights under Article 6 of this Regulation.57 Chapter III – Complaints Procedures Article 11 - Admissibility and scope 1. The filing supervisory authority shall assess the admissibility of a compliant and shall reject inadmissible complaints in accordance with
American Chamber of Commerce to the EU (AmCham EU)BEharter) and also rights for which controllers could be the guardians, as when ensuring the freedom of expression and information (Article 11 of the Charter).
Bundesverband Digitale Wirtschaft (BVDW) e.V.DEroviders in the digital area without log-in structures. This could be done, for example, by including an express clarification in Article 11 (1) GDPR that the person responsible is also exempted from providing proof of consent if he or she cannot identify the
Multi-Regional Clinical Trials Center of Harvard University and Brigham and Women’s HospitalUSdata subject for lack of contact information or means of reidentification, should suffice. We believe that this also follows from Article 11 of GDPR 69 See GDPR, art. 14. Note that when data are collected directly from the data subject, the notice must be pro
BVPA Bundesverband professioneller Bildanbieter e.V.DEchen Firmenläufen, Konzerten etc. dann muss auch nicht informiert werden. Da helfen die Aufsichtsbehörden mit Argumenta4onen über Art. 11 DSGVO oder wahlweise über Art. 14 DSGVO. Eine Rechtssicherheit bietet auch das nicht, da die Aufsichtsbehörden nun mal nic
International Society for Biological and Environmental Repositories (ISBER)USdata subject for lack of contact information or means of reidentification, should suffice. We believe that this also follows from Article 11 of GDPR 69 See GDPR, art. 14. Note that when data are collected directly from the data subject, the notice must be pro
ELIXIR LuxembourgLUd legitimate interests, such as through making the information publicly available. Such approach would be justified also based on Art. 11. In addition to legacy data, there are also situations where the information cannot be provided fully or at all to the dat
Universiteit van Amsterdam (IViR), Vrije Universiteit Brussel (LSTS) and KU Leuven (CiTiP)BEfundamental checks and balances in a free democratic society and its freedom is protected as a fundamental right in Europe under article 11(2) of the Charter. An active civil society and media are important aspects of democratic societies as they are elements
Zentralverband der deutschen Werbewirtschaft ZAWDEr im digitalen Bereich ohne Log-in-Strukturen. Dies könnte beispielsweise durch die Aufnahme einer ausdrücklichen Klarstellung zu Artikel 11 Abs. 1 DSGVO April 2020 Evaluierung DSGVO – Schwerpunktthemen und Handlungsfelder www.zaw.de Seite 5 von 7 erfolgen, da

Source: public consultation submissions and position papers. n = 16 mentions; counted as a literal reference to the article number.

Ask about this article →