Introduction We have written before about the issues with subject access requests (SARs) under GDPR. We are seeing a real rise in requests at the moment in part due to the current pandemic as employees in particular are making requests about the data that an employer or ex-employer might hold on them. There is a Read more »

Introduction Data protection rules (including GDPR and the UK Data Protection Act 2018) allow for individuals to make so-called “Subject Access Requests” (SARs) where they can seek to obtain copies of the personal data held about them by organisations and certain other related information about how that data is stored and processed. Recent rulings by Read more »

Introduction The ICO has finally imposed a fine (its highest so far) on British Airways (BA) of £20 million for a major data breach that affected 400,000 of its customers. This matter had been significantly delayed (as we wrote about here https://www.corderycompliance.com/is-ba-fine-in-departure-lounge/) and is a very significant climbdown from the original intention that the ICO Read more »

Introduction The Belgian Data Protection Authority (DPA) recently fined a small unnamed Belgian medical business €15,000 for breaching GDPR for failing to deactivate their email messaging system for a former employee. This meant that customer personal data could be accessed for an extended period. This brief article highlights a number of important issues raised in Read more »