Blog

The right of access is often referred to as a subject access request. It is one of the most commonly used rights people have under the GDPR. In this article we will explore what this right is and how organisations can comply with their statutory duties. Compliance with GDPR is

Demystifying the Right to be Informed under the GDPR: in this blog post, we'll explore the nuances of this fundamental right, its implications for individuals and organisations, and practical tips for compliance. [su_box title="About the Author" box_color="#020a4a"]Michael has many years' experience supporting, developing and improving effective data protection and GDPR

A privacy statement is needed because under the GDPR people are entitled to know, when it comes to their personal data who has it how is it used, and who's protecting it? This is where the privacy statement comes in. In this post we will explore what a privacy statement

Under the GDPR every organisation must know how to respond to a subject access request. At its simplest a subject access request is when a person, a data subject, asks for access to data held about them. However, the GDPR sets certain standards that take this right further than simply

Problem: People's GDPR rights, as set out in the EU and UK GDPR (general data protection regulations) give control over how their personal information is used in certain circumstances. These rights are not well understood, not absolute in most instance, and are sometimes mutually exclusive. Solution: having an understanding of

Automated decision making and profiling are regulated by the General Data Protection Regulation (GDPR). How GDPR affects these practices is important to understand. [su_box title="About the Author" box_color="#020a4a"]Michael has many years' experience supporting, developing and improving effective data protection and GDPR compliance systems. He has worked in this field in

The ICO has proposed enforcement action against TikTok for a number of alleged GDPR breaches. [su_box title="About the Author" box_color="#020a4a"]Michael has many years' experience supporting, developing and improving effective data protection and GDPR compliance systems. He has worked in this field in the public, private and charity sectors including at

When to refuse a subject access request? The Problem: individuals are entitled to access personal information about themselves under the GDPR. However the right is not absolute and a number of exemptions apply. There are also additional requirements on organisations regarding certain supplementary information that are hard to comply with.

A well structured privacy statement is key to GDPR compliance and a crucial trust signal to customers and suppliers. However, many organisations get this crucial data protection requirement wrong. What is a Privacy Statement? What is a Privacy Statement? Under the GDPR people have the right to be informed. This