Topic
Data Subject Access Requests
96 published works
Privacy Matters
Europe: Advocate General delivers Opinion on the right of access for purposes unrelated to data protection
Authors: Verena Grentzenberg and Katja-Maria Harsdorf On 20 April 2023, the Advocate General (“AG”), Nicholas Emiliou, published his Opinion in the case of FT v DW, (C-307/22). In particular, the…
Technology Law Dispatch
ICO issues guidance on responding to subject access requests
By Cynthia O’Donoghue, Angelika Christoforou
On 26 September 2022, the UK Information Commissioner’s Office (“ICO”) issued a blog post addressing compliance with data subject access requests (“DSARs”). A DSAR is a written request by an…
Internet Newsletter for Lawyers
Reforming data protection
Following a consultation on reforming the UK’s data protection laws – partly designed to “provide an opportunity for the UK to reshape its approach to regulation” post-Brexit – the government…
Global Privacy & Security Compliance Blog
CJEU AG Sets High Bar for Responses to Data Subject Access Requests
The Advocate General argues that organisations should provide individuals with information on the specific recipients of their personal data. By Tim Wybitul, James Lloyd, Isabelle Brams, Irina Vasile, and Amy…
ComplexDiscovery
The Cost of GDPR Compliance? An Icy Response to Email Address and Access Request Non-Compliance
By Rob Robinson
Editor’s Note: The European Data Protection Board (EDPB) is an independent European body, which contributes to the consistent application of data protection rules throughout the European Union, and promotes cooperation between…
Data Privacy Dish
Are companies required to allow individuals to appeal denied data subject requests?
All modern data privacy statutes allow individuals the ability to request that organizations take certain actions in relation to their personal information. Organizations are not always required to take the…
Privacy Matters
Ireland: Employers can now process Data Subject Access Requests without advice of health service providers
On 8 March 2022, The Data Protection Act 2018 (Access Modification) (Health) Regulations 2022 (“the 2022 Regulations”) came into force, revoking and replacing the Data Protection (Access Modification) (Health) Regulations…
Privacy Compliance & Data Security
If You Don’t Want It Released to an Employee, Don’t Put It in Your Employee Files
By Odia Kagan
The old saying went that "if you don't want it on the front page of the newspaper, don't put it in an email." Well, if you don't want to produce…
Data Privacy Dish
How many Do Not Sell requests do health care companies receive each year?
The CCPA Regulations require that businesses that buy, receive, sell, or share personal information about more than 10 million Californians disclose metrics within their privacy notices regarding the quantity of…
Data Privacy Dish
How long do retailers take to respond to deletion requests?
The CCPA Regulations require that businesses that buy, receive, sell, or share personal information about more than 10 million Californians disclose metrics within their privacy notices regarding the speed with…