Data subject rights

View Risk & Compliance by content type:

Practice notes

Precedents

Q&As

Featured Risk & Compliance content

Money Laundering Regulations 2017—simplified due diligence

You may apply simplified customer due diligence (SDD) measures in relation to particular business relationships or transactions which you determine...

Facilitation payments under the Bribery Act 2010

Facilitating the performance of a duty by public officialsFacilitation payments, also known as facilitating or grease payments, are generally small...

What is a solicitor's undertaking?

An undertaking is a commitment by a solicitor to do something. It can be enforced against the solicitor by the courts. Failure to comply with an...

Dawn raid—who can raid my organisation and why?

The UK Government has legislated to permit a number of UK authorities to obtain search warrants to 'raid' a business premises. The potential for a...

Practice notes

Active bribery, passive bribery and bribing foreign public officials

The purpose of this Practice Note is to provide a general understanding of the offences under section 1, 2 and 6 of the Bribery Act 2010 (BA 2010). It...

Produced in partnership with Joanne Kane of Carmelite Chambers 9th Nov

Practice notes

High-risk third countries tracker

This Practice Note lists high-risk third countries identified by the Financial Action Task Force (FATF), HM Treasury and the European Commission as...

9th Nov

In-house

Practice notes

Getting the Deal Through: Merger Control 2021

Jurisdictions coveredThe following jurisdictions are covered in this report:Albania; Australia; Austria; Belgium; Bosnia and Herzegovina; Brazil;...

9th Nov

Precedents

Modern slavery: contract clauses

1DefinitionsModern Slavery Policy•means the Customer's anti-slavery and human trafficking policy as set out in Schedule [insert] as updated by the...

9th Nov

In-house

Practice notes

AML and counter-terrorist financing—source of funds

Source of funds and wealth was a key focus of the SRA’s Preventing Money Laundering and Financing of Terrorism thematic review, published in March...

9th Nov

In-house

Practice notes

Introduction to retained EU law

This Practice Note provides an introduction to retained EU law, which is an entirely new legal concept introduced to UK domestic law in preparation...

9th Nov

Brexit

Precedents

Standard contractual clauses—set II—controller to controller (Model Clauses)

DRAFTING FOR BREXIT: For the latest information on the impact of Brexit on the drafting, negotiation and enforceability of this Precedent, see...

9th Nov

Practice notes

Money Laundering Regulations 2017—nominated officer

This Practice Note sets out when organisations must appoint a nominated officer, the duties of the nominated officer and practical steps nominated...

9th Nov

In-house

Most recent Data subject rights content

Q&As

What should I do if I can’t access all the relevant data to respond to a data subject request because of coronavirus (COVID-19) social distancing measures?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects, including providing rights of rectification, erasure and...

26th Nov

Q&As

What makes a data subject access request ‘complex’?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects in the EU including providing rights of access,...

26th Nov

Precedents

Response to data subject request—right of access—seeking clarification

[Name of individual making request][Address of individual making request][Date of this response]Dear [insert name of individual making request]I am...

26th Nov

Precedents

Data rectification request form

Please complete this form if you wish to ask us to correct or complete inaccurate personal data about you (a data rectification request). You do not...

25th Nov

Precedents

Response to data subject request—right of access—able to comply with request

[Name of individual making request][Address of individual making request][Date of this response]Dear [insert name of individual making request]I am...

24th Nov

Precedents

Data subject access request form

Please complete this form if you wish to request access to your personal data. You do not have to use this form, but it will help us to deal with your...

24th Nov

Precedents

Response to data subject request—right of rectification

[Name of individual making request][Address of individual making request][Date of this response]Dear [insert name of individual making request]I am...

24th Nov

Precedents

Response to data subject request—right of access—unable to comply with request

[Name of individual making request][Address of individual making request][Date of this response]Dear [insert name of individual making request]I am...

24th Nov

Q&As

How do I calculate the time limit for responding to a data subject request?

The General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR) provides for enhanced rights for data subjects, including providing rights of...

17th Nov

Q&As

What data/information can a data subject request from me under the right of access?

The General Data Protection Regulation provides for enhanced rights for data subjects including providing rights of rectification, erasure and...

17th Nov

Q&As

If a client makes a subject access request, what information are we obliged to provide and what can we retain? Can we give the client a summary of the data held or do we need to provide a copy?

The right of access is set out in the General Data Protection Regulation, Regulation (EU) 2016/679, Art 15 (the GDPR). A data subject has the right...

17th Nov

Q&As

Handling data subject requests—if I request further identity information, when does the clock start ticking?

The General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR) provides for enhanced rights for data subjects, including providing rights of...

17th Nov

Q&As

Can I charge a fee for dealing with a data subject access request?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects in the EU including providing rights of rectification,...

13th Nov

Practice notes

Data subject rights—rectification, erasure and restriction of processing

Brexit: As of exit day (31 January 2020), the UK is no longer an EU Member State, but it has entered an implementation period during which it...

13th Nov

Practice notes

Data subject rights—objection to processing

Brexit: As of exit day (31 January 2020), the UK is no longer an EU Member State, but it has entered an implementation period during which it...

13th Nov

Q&As

We are acting for a client in a dispute. We are pre-action. The opposing party (our client's ex-partner) has made a Data Subject Access Request of this firm. Can we resist on the basis that it is a fishing expedition? Does Legal Advice Privilege apply and to what extent?

Processing personal dataThe obligations that the General Data Protection Regulation, Regulation (EU) 2016/679 (the GDPR) places on data processors and...

Produced in partnership with Peter Steel of Augury Consulting Limited 13th Nov

Q&As

When receiving a subject access request in relation to CCTV images, how do I deal with images of individuals other than the person to whom the request relates? What if the data subject to whom the request relates is a child?

Practice Note: Handling data subject requests explains that you do not have to comply with a data subject access request if doing so means disclosing...

13th Nov

Precedents

Response to data subject request—all rights—charging a fee or extension of time to respond

[Name of individual making request][Address of individual making request][Date of this response]Dear [insert name of individual making request]I am...

13th Nov

Practice notes

Data subject rights—automated decision making, including profiling

Brexit: As of exit day (31 January 2020), the UK is no longer an EU Member State, but it has entered an implementation period during which it...

13th Nov

Precedents

Response to data subject request—right of portability—clarifying data and format

[Name of individual making request][Address of individual making request][Date of this response]Dear [insert name of individual making request]I am...

12th Nov