A question was raised recently about how GDPR could impact the collection of information about human rights violations. In our research into this question, as long as the data that is being collected is “for reasons of public interest”, an organisation does not have an obligation to delete this data (and it is assumed that it is ok to collect this type of info without consent). Source: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/dealing-citizens/do-we-always-have-delete-personal-data-if-person-asks_en
The General Data Protection Regulation (GDPR) gives individuals the right to ask for their data to be deleted and organisations do have an obligation to do so, except in the following cases:
- the personal data your company/organisation holds is needed to exercise the right of freedom of expression;
- there is a legal obligation to keep that data;
- for reasons of public interest (for example public health, scientific, statistical or historical research purposes).
Please share any questions or concerns about this understanding of the GDPR and how it applies to human rights documentation efforts!