The UK General Data Protection Regulation (UK GDPR), Assimilated Regulation (EU) 2016/679 provides for enhanced rights for data subjects including providing rights of access, rectification, erasure and restriction of processing, Rights of data portability, and a right of data subjects, with strict time limits for complying.
Data subject access requests (also called DSARs) are relatively common and are seen as the gateway right, enabling data subjects to exercise other rights such as the right to rectification or erasure. They can be particularly onerous for businesses.
Article 15 of the UK GDPR entitles data subjects to:
confirmation of whether their personal data is being processed
access to the personal data that is being processed
receive additional information, broadly commensurate with the information required to be provided in your privacy notice
a copy of the personal data in question
The UK GDPR sets out mandatory categories of information which must be supplied in connection with a data subject access request. See Practice Note: Rights of data subjects—Right of access (Article 15 of the UK GDPR).
In...
To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.
**Trials are provided to all LexisNexis content, excluding Practice Compliance, Practice Management and Risk and Compliance, subscription packages are tailored to your specific needs. To discuss trialling these LexisNexis services please email customer service via our online form. Free trials are only available to individuals based in the UK, Ireland and selected UK overseas territories and Caribbean countries. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
The Office of Financial Sanctions Implementation (OFSI) has imposed a monetary penalty of £4,732,830.58 on Citibank, N.A., London Branch (CBNA London)...
HM Treasury (HMT) has announced its intention to double the maximum fine available to the Office for Financial Sanctions Implementation (OFSI) from...
The Serious Fraud Office (SFO) has announced that a confidential out-of-court settlement has been reached between Eurasian Natural Resources...
The Information Commissioner's Office (ICO) has launched a consultation on draft guidance on the use of anonymisation and pseudonymisation for...
Priority between loss reliefs in loss making companiesWhy does it matter?A company that is a member of a group and has incurred any of the types of losses available for surrender by way of group relief may, without any further rules, have more than one way in which to use the loss. There are a
If a rentcharge is shown as being informally exonerated on title information, does this apply to the current registered owner? Or does the informal exoneration only apply to the parties to the document which informally exonerated the rentcharge?This Q&A considers the situation where, at some point
Strike out—making an application to strike out a statement of caseA strike out order can be made either following an application by the parties or on the court's own initiative. This Practice Note deals with the scenario of the order being made following a party's application.Making an application
Contributory negligence in personal injury claimsContributory negligence is a partial defence which can lead to a discount in damages.Other defences may also be relevant. See Practice Notes: Did the claimant consent to the risk of injury? and Was the claimant involved in an illegal activity?If a
0330 161 1234