If the project participants agree on the use of certain communication services, it must be assumed that the participants have at least given their verbal consent and thus their authorisation. 

If personal data of persons who are not part of the project team is processed as part of the project, it must be ensured that the storage and processing of this data is lawful. In this case, the project team may be subject to the information obligation under the GDPR and written consent may even have to be obtained from the data subjects. 

Accordingly, it should be checked at the start of the project whether such obligations arise as a result of the project. If this is the case, the relevant documents, such as data protection notices or a declaration of consent, must be prepared as part of the project and presented to the data subjects before the data is processed. 

Task

Does your organisation have appropriate documentation? Are there data protection notices for project or training participants? Are there other templates, such as a consent form for the use of photos? Make a list of existing documents and collect these files in your project's file repository if necessary.