The following Risk & Compliance guidance note provides comprehensive and up to date legal information covering:
Individuals have a number of rights in respect of their personal data under the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679:
a right of access
rights to rectification, erasure and restriction of processing
a right of data portability
a right to object to processing
a right not to be subject to a decision based solely on automated processing, including profiling
A data subject can make a request to a data controller to exercise one or more of these rights at any time. They do not need to explain their reasons for making a request and there are strict time limits for complying. Responding to a data subject request can be onerous for a data controller and in most cases you cannot charge the data subject for complying with their request.
With this in mind, it is essential to put in place appropriate systems and controls to manage the process of handling data subject requests, to make the process as efficient as possible and minimise the risk of non-compliance. This Practice Note considers some common features of data subject requests, issues that can arise when handling a request and compliance strategies to best equip your organisation to manage any requests it receives.
For more information on the criteria for individual data subject rights, please refer to the relevant Practice Notes and Flowcharts:
**excludes LexisPSL Practice Compliance, Practice Management and Risk and Compliance. To discuss trialling these LexisPSL services please email customer service via our online form. Free trials are only available to individuals based in the UK. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
To view the latest version of this document and thousands of others like it, sign-in to LexisPSL or register for a free trial.
Existing user? Sign-in
Take a free trial
Take a free trial
0330 161 1234