... of personal data for identification purposes from the point of view of the principle of data minimisation, as set out in the EU’s General Data Protection Regulation (GDPR) and examine whether the processing of personal data for these purposes can be considered proportionate, i.e. whether it is performed...

... obligations that it could be argued are unnecessary as there are already mechanisms in place to obtain the information in question. The recently enacted regulations raise concerns to the author about access rights, data protection and monitoring, among other aspects. Originality/value This paper provides...