Sign-in Help

Handling data subject requests

View Practice Compliance by content type:

News
Practice notes
Precedents
Q&As

Latest Practice Compliance News

Practice Compliance weekly highlights—8 April 2021

Practice Compliance weekly highlights—8 April 2021

The following Practice Compliance news provides comprehensive and up to date legal information on Practice Compliance weekly highlights—8 April 2021

LexisPSL and MLex trial new interactive EU GDPR enforcement tracker

LexisPSL and MLex trial new interactive EU GDPR enforcement tracker

The following Commercial news provides comprehensive and up to date legal information on LexisPSL and MLex trial new interactive EU GDPR enforcement tracker

DPAs may not be receiving sufficient judicial scrutiny

DPAs may not be receiving sufficient judicial scrutiny

The following Corporate Crime news provides comprehensive and up to date legal information on DPAs may not be receiving sufficient judicial scrutiny

Practice Compliance weekly highlights—1 April 2021

Practice Compliance weekly highlights—1 April 2021

The following Practice Compliance news provides comprehensive and up to date legal information on Practice Compliance weekly highlights—1 April 2021

Featured Practice Compliance content

Facilitation payments under the Bribery Act 2010

Facilitation payments under the Bribery Act 2010

Facilitating the performance of a duty by public officialsFacilitation payments, also known as facilitating or grease payments, are generally small...

What is a solicitor's undertaking?

What is a solicitor's undertaking?

An undertaking is a commitment by a solicitor to do something. It can be enforced against the solicitor by the courts. Failure to comply with an...

Active bribery, passive bribery and bribing foreign public officials

Active bribery, passive bribery and bribing foreign public officials

The purpose of this Practice Note is to provide a general understanding of the offences under section 1, 2 and 6 of the Bribery Act 2010 (BA 2010). It...

High-risk third countries tracker

High-risk third countries tracker

This Practice Note lists high-risk third countries identified by the Financial Action Task Force (FATF), HM Treasury and the European Commission as...

Precedents

Modern slavery: contract clauses

1DefinitionsModern Slavery Policy•means the Customer's anti-slavery and human trafficking policy as set out in Schedule [insert] as updated by the...
Read More >
9th Nov
tag iconIn-house
Practice notes

AML and counter-terrorist financing—source of funds

Source of funds and wealth was a key focus of the SRA’s Preventing Money Laundering and Financing of Terrorism thematic review, published in March...
Read More >
9th Nov
tag iconIn-house
Practice notes

Introduction to retained EU law

This Practice Note provides an introduction to retained EU law, which is an entirely new legal concept introduced to UK domestic law in preparation...
Read More >
9th Nov
tag iconBrexit
Precedents

Standard contractual clauses—set II—controller to controller (Model Clauses)

DRAFTING FOR BREXIT: For the latest information on the impact of Brexit on the drafting, negotiation and enforceability of this Precedent, see...
Read More >
9th Nov
Precedents

Anti-bribery and corruption for law firms—post-training assessment questions

How to use this testThese questions are designed to test your understanding after your attendance at our training on avoiding bribery and...
Read More >
9th Nov
Practice notes

Compliance officer for legal practice—COLP—title and duties 2011 [Archived]

The compliance officer for legal practice (COLP) sits at the heart of the firm's regulatory arrangements. This does not mean that the firm and its...
Read More >
9th Nov

Most recent Handling data subject requests content

Precedents

Policy—data subject access requests

IP COMPLETION DAY: 11pm (GMT) on 31 December 2020 marks the end of the Brexit transition/implementation period entered into following the UK’s...
Read More >
29th Mar
tag iconIn-house
Q&As

When making a data subject access request to a law firm, is a client entitled to copies of the firm’s own internal communications relating to allegations of negligence by the client against the firm? Is the answer the same for a client complaint rather than an actual or potential claim?

Personal data that is subject to a duty of client confidentiality or contained within communications that are considered to be legally privileged may...
Read More >
Produced in partnership with Peter Steel of Augury Consulting Limited 24th Mar
Q&As

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?

This Q&A draws on the Information Commissioner’s Office’s (ICO’s) guidance on business-to-business marketing, which may or may not be relevant...
Read More >
Produced in partnership with Peter Steel of Bevan Brittan 24th Mar
Q&As

When complying with a data subject erasure request, do we have to delete information in our backups?

Article 17 of Retained Retained Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR) grants data subjects the right to have their...
Read More >
24th Mar
Q&As

How do I calculate the time limit for responding to a data subject request?

The General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR) provides for enhanced rights for data subjects, including providing rights of...
Read More >
24th Mar
Q&As

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects, including providing rights of access, rectification,...
Read More >
24th Mar
Q&As

When receiving a subject access request in relation to CCTV images, how do I deal with images of individuals other than the person to whom the request relates? What if the data subject to whom the request relates is a child?

Practice Note: Handling data subject requests explains that you do not have to comply with a data subject access request if doing so means disclosing...
Read More >
24th Mar
Q&As

What data/information can a data subject request from me under the right of access?

The General Data Protection Regulation provides for enhanced rights for data subjects including providing rights of rectification, erasure and...
Read More >
24th Mar
Q&As

Do I have to return original correspondence to a third party from a matter I am no longer instructed on where that person has requested access to it under the General Data Protection Regulation?

Correspondence sent by third parties to a firm in the course of a matter generally belongs to the client, and copies of that correspondence made by...
Read More >
24th Mar
Q&As

How should I deal with a data subject access request received through a third party online portal?

There are service providers on the market offering to help individuals assert their rights under data protection law. So, you might receive a data...
Read More >
24th Mar
Q&As

We are acting for a client in a dispute. We are pre-action. The opposing party (our client's ex-partner) has made a Data Subject Access Request of this firm. Can we resist on the basis that it is a fishing expedition? Does Legal Advice Privilege apply and to what extent?

Processing personal dataThe obligations that the General Data Protection Regulation, Regulation (EU) 2016/679 (the GDPR) places on data processors and...
Read More >
Produced in partnership with Peter Steel of Augury Consulting Limited 24th Mar
Q&As

How do we respond to customers who question or challenge us in relation to automated decision making?

Article 22(1) of the General Data Protection Regulation (UK GDPR), Retained Regulation (EU) 2016/679gives data subjects the right not to be subject to...
Read More >
24th Mar
Q&As

How long do I have to comply with a data subject request?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of access, rectification,...
Read More >
24th Mar
Q&As

What makes a data subject access request ‘complex’?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects in the EU including providing rights of access,...
Read More >
24th Mar
Q&As

What should I do if I can’t access all the relevant data to respond to a data subject request because of coronavirus (COVID-19) social distancing measures?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects, including providing rights of rectification, erasure and...
Read More >
24th Mar
Q&As

Handling data subject requests—if I request further identity information, when does the clock start ticking?

The UK General Data Protection Regulation, Retained Regulation (EU) 2016/679 (UK GDPR) provides for enhanced rights for data subjects, including...
Read More >
24th Mar
Q&As

Can I charge a fee for dealing with a data subject access request?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and...
Read More >
24th Mar
Precedents

Response to data subject request—right to erasure—able to comply with request

[Name of individual making request][Address of individual making request][Date of this response]Dear [insert name of individual making request]I am...
Read More >
1st Mar
Precedents

Response to data subject request—right to erasure—unable to comply with request

[Name of individual making request][Address of individual making request][Date of this response]Dear [insert name of individual making request]I am...
Read More >
1st Mar
Q&As

If a client makes a subject access request, what information are we obliged to provide and what can we retain? Can we give the client a summary of the data held or do we need to provide a copy?

The right of access is set out in the Article 15 of the General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR). A data subject has the...
Read More >
15th Feb

Popular documents

LEXISNEXIS

The Offshore Transmission Owner (OFTO) regime

What are OFTOs?Offshore Transmission Owners (OFTOs) are the owners of offshore transmission assets which connect offshore wind farms to the onshore electricity network. The transmission assets comprise everything between the offshore point of connection with the generating wind farm assets and the

LEXISNEXIS

Proprietary estoppel

This Practice Note considers proprietary estoppel from a generic standpoint.For industry specific guidance on proprietary estoppel, see Practice Notes:•Estoppel and property law•Mortgages by estoppelProprietary estoppel—what is it?Unlike the other forms of estoppel (see Practice Note: Estoppel—what,

LEXISNEXIS

Community order requirements

Community order requirementsCommunity order requirements are set out in the Criminal Justice Act 2003 (CJA 2003), as amended by the Legal Aid, Sentencing and Punishment of Offenders Act 2012 (LASPO 2012) and the Offender Rehabilitation Act 2014 (ORA 2014). Criminal Justice Act 2003, s 152(2)

LEXISNEXIS

Tort—the different types of tort

This Practice Note identifies the main torts (bar negligence and nuisance, which are covered elsewhere in our related content) and their key characteristics. Specifically:•trespass to land•trespass to the person•privacy/defamation•liability for animals•employers' liability•product