Blog

Most people understand a Subject Access Request (SAR) as a request for a copy of personal data. That’s true—but it’s also incomplete. Article 15 of the GDPR requires organisations to provide not only the personal data itself, but also a package of supplementary information that explains how and why the

The General Data Protection Regulation (GDPR) provides individuals with several rights regarding their personal data. Two of the most important — but often confused — rights are: Right of Access (Article 15) Right to Data Portability (Article 20) Below is a comparison and contrast of these two rights, including practical

Responding to a subject access request can feel difficult and time consuming for businesses. Most will be happy to comply with people's rights but fear the burden it places on them or the risks of getting them wrong. [su_box title="About the Author" box_color="#020a4a"]Michael has many years' experience supporting, developing and

As businesses increasingly rely on data to tailor their marketing efforts, the protection of this information has become paramount. The General Data Protection Regulation (GDPR) is at the forefront of these efforts, placing a strong emphasis on individual rights. Among these rights, the right to object to the use of

Facial recognition is an example of personal data processing and is covered by the GDPR. The General Data Protection Regulations (GDPR) stands as a robust framework protecting personal data both in the UK and across Europe. One of the ideas behind the GDPR was to make it forward looking. Who

Automated Decision Making and Profiling is regulated by the The General Data Protection Regulations (GDPR). These have redefined how organisations handle personal data, refining and reforming rules to protect individuals' privacy. In an era where automated decision making and profiling are becoming increasingly prevalent, understanding the rules and rights under

The right to object is one of a range of rights the GDPR gives to people to control their personal data and how it is used. Unlike most other rights this is absolute in some circumstances – primarily direct marketing – so it is one for marketers to be aware of.

The obligation to provide information in a reusable, and machine readable data format not only arises under the Freedom of Information Act. It is also important for GDPR – when people exercise their right to data portability, for example. What exactly this means is a bit nebulous and in fact

The Right to Restrict Processing is one of people's rights to control their data under GDPR. It is perhaps one of the most complex. This is for two reasons: like many rights it only applies in certain circumstances in many ways this right exists to help people facilitate their other

Like all rights the right to data portability is not absolute. It only applies in some circumstances. The restrictions, and potential complexity that arises from them, on this right illustrate the importance of knowing the lawful basis for your data processing. Also, you should be drafting clear privacy statements, and

The right to rectification, as outlined in Article 16 of the General Data Protection Regulation (GDPR), grants individuals the authority to request the correction of inaccurate personal data concerning them. This fundamental right empowers individuals to ensure the accuracy and integrity of their personal information held by data controllers. [su_box

This blog post is part of our Rights Under GDPR explainer series, looking at the right to be forgotten. [su_box title="About the Author" box_color="#020a4a"]Michael has many years' experience supporting, developing and improving effective data protection and GDPR compliance systems. He has worked in this field in the public, private and charity