The UK General Data Protection Regulation (UK GDPR), Assimilated Regulation (EU) 2016/679 provides for enhanced rights for data subjects including providing rights of access, rectification, erasure and restriction of processing, data portability, a right to object to processing and rights relating to automated decision making, including profiling, with strict time limits for complying.
Data subject access requests (also called DSARs) are relatively common and are seen as the gateway right, enabling data subjects to exercise other rights such as the right to rectification or erasure. They can be particularly onerous for businesses.
Article 15 of the UK GDPR entitles data subjects to:
confirmation of whether their personal data is being processed
access to the personal data that is being processed
receive additional information, broadly commensurate with the information required to be provided in your privacy notice
a copy of the personal data in question
The UK GDPR sets out mandatory categories of information which must be supplied in connection with a data subject access request. See Practice Note: Data subject rights—access—Information requirements.
In
To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.
CONTACT US
