This document reflects Assimilated Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR) and ICO guidance on the Right of access. It is intended for private-sector commercial organisations in the UK.
Individuals have a number of rights in respect of their personal data under the UK GDPR:
a right of access
rights to rectification, erasure and restriction of processing
a right of data portability
a right of data subjects
A data subject can make a request to a data controller to exercise one or more of these rights at any time. They do not need to explain their reasons for making a request and there are strict time limits for complying. Responding to a data subject request can be onerous for a data controller and in most cases you cannot charge the data subject for complying with their request.
With this in mind, it is essential to have processes for handling the full range of data subject requests, to make these processes as efficient as possible and minimise the risk of non-compliance.
See Practice Note: How to handle data...
To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.
**Trials are provided to all LexisNexis content, excluding Practice Compliance, Practice Management and Risk and Compliance, subscription packages are tailored to your specific needs. To discuss trialling these LexisNexis services please email customer service via our online form. Free trials are only available to individuals based in the UK, Ireland and selected UK overseas territories and Caribbean countries. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
This week's edition of Practice Compliance weekly highlights includes coverage of the Global Human Rights and International Humanitarian Law Sanctions...
MLex: Privacy information and routes to exercise data rights have been updated by Anthropic, Apple, Meta and OpenAI following UK regulatory scrutiny,...
The Serious Fraud Office (SFO) has updated its corporate cooperation guidance on self-reporting suspected fraud, bribery and corruption and published...
The Department for Business, Innovation, Science and Trade (BIST) has launched a consultation on reforming the whistleblowing framework under the...
What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a
If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit
Glossary—Latin legal termsDespite attempts in recent years to simplify the language used in legal cases, there are still a number of Latin phrases commonly used in personal injury claims. The following Latin phrases are listed in alphabetical order:Latin termDefinitionMeaningActa iure imperiiLegal
Template for regulatory references given by SMCR firms and disclosure requirements[Insert addressee details]Dear [insert name][It is our understanding that [insert name of prospective employee] [was an employee of yours between the dates of [insert dates as appropriate] OR is a current employee of
0330 161 1234