“What’s that Skip? Someone’s got your Metadata? Crikey!” – Subject Access and...
While strolling through the web one day, Outside the very merry month of May, Oh, look what I should find, The web is wonderful and kind, By giving me a case on metadata. In recognition of National...
View ArticleAct Now launches GDPR Policy Pack
The first fine was issued recently under the General Data Protection Regulation (GDPR) by the Austrian data protection regulator. Whilst relatively modest at 4,800 Euros, it shows that regulators are...
View ArticleSubject Access Requests for Paper Records
The old Data Protection Act 1998 not only gave Data Subjects a right to see their personal data held on computer but also that which was held on paper records which were held in a “relevant filing...
View ArticleGDPR Subject Access Time Limits Reconsidered
Just like its predecessor (DPA 2018), the General Data Protection Regulation (GDPR) gives Data Subjects a right to make a Subject Access Request (SAR) to a Data Controller. This means that they can...
View ArticleA Matter of Priorities: FOI and DP Deadlines in a Pandemic
Responding to the Covid-19 pandemic is stretching our public services. Most obviously the NHS is diverting all the resources it can to meeting critical health needs. But local authorities are also...
View ArticleThe ICO’s New Subject Access Guidance
GDPR has introduced some new Data Subject rights including the right to erasure and data portability. The familiar right of Subject Access though still remains albeit with some additional obligations....
View ArticleThe Farage Bank Row: The Power of the GDPR Subject Access Right?
Dame Alison Rose, the CEO of NatWest, resigned on Wednesday morning after being accused of leaking information on Nigel Farage’s bank account to the BBC. Following a GDPR subject access request, the...
View ArticleCouncil Loses High Court Damages Claim for Misuse of Personal Data
A recent High Court judgment highlights the importance of data controllers treating personal data in their possession with care and in accordance with their obligations under the General Data...
View ArticleCJEU’s FT v. DW Ruling: Navigating Data Subject Access Requests
In the landmark case FT v. DW (Case C 307/22), the Court of Justice of the European Union (CJEU), delivered a ruling that sheds light on the intricacies of data subject access requests under the EU...
View ArticleTory Party Data Sharing Revealed
We recently wrote about the The Good Law Project (GLP) challenging one aspect of the Conservative Party’s data collection practices. The party’s website contains an online tool which allows an...
View ArticleGDPR Subject Access: OpenDemocracy Report
The Article 15 Right of Subject Access is a fundamental right under the UK GDPR. It allows data subjects to see what personal data is held about them, how it is being processed and precisely who it is...
View ArticleWaltzing Through Privacy: Strictly Come Dancing Meets GDPR
The prime time BBC show, Strictly Come Dancing, is currently embroiled in a significant controversy following allegations of bullying and a toxic work environment. Reports have surfaced from celebrity...
View ArticleLabour Party Reprimanded for Subject Access Delays
Last week, the Information Commissioner’s Office (ICO) issued the Labour Party with a Reprimand, under the UK GDPR, for repeatedly failing to respond to subject access requests (SARs). This is an...
View Article