Category Archives: Subject Access

The ICO’s New Subject Access Guidance

GDPR has introduced some new Data Subject rights including the right to erasure and data portability. The familiar right of Subject Access though still remains albeit with some additional obligations. Last week the Information Commissioner’s Office (ICO) published its long awaited right of access detailed guidance following a consultation exercise in December. The guidance provides some much needed clarification … Continue reading

Posted in ICO, Subject Access, Uncategorized | Tagged , | Leave a comment

A Matter of Priorities: FOI and DP Deadlines in a Pandemic

Responding to the Covid-19 pandemic is stretching our public services. Most obviously the NHS is diverting all the resources it can to meeting critical health needs. But local authorities are also struggling to maintain vital services in the face of … Continue reading

Posted in coronavirus, DP ACT 2018, FOI, FOISA, GDPR, Subject Access | Tagged , , , , | Leave a comment

GDPR Subject Access Time Limits Reconsidered

Just like its predecessor (DPA 2018), the General Data Protection Regulation (GDPR) gives Data Subjects a right to make a Subject Access Request (SAR) to a Data Controller. This means that they can obtain: Confirmation that their data is being … Continue reading

Posted in Data Protection, GDPR, Privacy, Subject Access, Uncategorized | Tagged , , , | 2 Comments

Subject Access Requests for Paper Records

The old Data Protection Act 1998 not only gave Data Subjects a right to see their personal data held on computer but also that which was held on paper records which were held in a “relevant filing system”. A recent … Continue reading

Posted in DP ACT 2018, GDPR, Subject Access | 3 Comments

Act Now launches GDPR Policy Pack

The first fine was issued recently under the General Data Protection Regulation (GDPR) by the Austrian data protection regulator. Whilst relatively modest at 4,800 Euros, it shows that regulators are ready and willing to exercise their GDPR enforcement powers. Article … Continue reading

Posted in CCTV, Data Portability, dpia, GDPR, Policy pack, Privacy, Security, Subject Access, Uncategorized | Tagged , , , , , , , , | Leave a comment