Topic
Data Subject Access Requests
96 published works
Pannone Corporate News and Opinion
HR Forum Wednesday, 9 October 2019 9.00 am to 12.00 noon
Pannone Corporate’s HR Forum is a free regular update for employers and HR professionals, featuring sessions on employment case law, legislation and topics of interest to those involved in managing…
Tech Law Blog
ICO clarifies time limit for responding to subject access requests
The UK Information Commissioner’s Office (ICO) has amended its guidance on the time limit for responding to a subject access request (SAR). Under Article 12 GDPR, a data controller must…
Privacy Compliance & Data Security
How to Count to 30: UK ICO Sets Timeline for Responding to Data Subject Requests
By Odia Kagan
Following a decision from the Court of Justice of the EU, the UK Information Commissioner's Office changed its guidance on how to calculate the GDPR 30-day time limit for data…
Privacy World
Subject Access Requests – What does ‘one month’ mean?
The ICO has confirmed a small, but important, change to the time limits for responding to subject access requests (SARs) under the GDPR. Calculation of the one-month time limit should…
Privacy & Information Security Law Blog
UK ICO Updates Timescales for Responding to Subject Access Requests
On August 15, 2019, the UK Information Commissioner’s Office updated its guidance on the timescale for responding to data subject access requests under the EU General Data Protection Regulation, following…
Privacy Compliance & Data Security
Study: Spike in Data Subject Asset Requests Under GDPR
By Odia Kagan
A study by business process outsourcer Parseq shows shows an upsurge in data subject asset requests under GDPR. Almost two thirds of London firms (62 percent) saw an increase in data…
Privacy Compliance & Data Security
Responding To GDPR Data Subject Access Requests: Think, Engage, Document
By Odia Kagan
When dealing with data subject access requests (DSAR) under GDPR: Take your time and think about the response. Document and audit your response process. These are the key takeaways from…
Technology Law Dispatch
UK High Court says no…administrators are not controllers
By Cynthia O’Donoghue, Curtis McCluskey
The recent case of Green v. Group Ltd and others [2019] EWHC 954 (Ch) dealing with Cambridge Analytica’s insolvency has clarified the approach that administrators should take when subject access…
Technology Law Dispatch
How (not) to restrict GDPR access requests in employment proceedings – German court establishes high threshold
By Ramona Kimmich, Dr. Thomas Fischl, Jan Weißgerber
Procedural laws and principles contain a clear concept regarding which party must present and prove what information in court proceedings. Claimants in employment proceedings currently try to use the right…
Privacy Compliance & Data Security
UK ICO Issues Advice to Physicians on Handling Health Information Requests
By Odia Kagan
Data subject access rights and your medical practice. The UK Information Commissioner's Office (ICO) issues advice. Medical practices have reported a significant rise in subject access requests (SARs) since the…