Can personal data be passed on within a group?
Personal data may only be transferred within a group of companies under certain legal conditions. The GDPR treats each group company as an independent controller within the meaning of Art. 4 No. 7 GDPR, which is why data transfers between group companies require a legal basis. Legitimate interests, order processing or joint responsibility can legitimize such transfers. An experienced data protection lawyer can help to develop legally compliant group structures and minimize compliance risks.