Handling data subject requests

This document reflects Assimilated Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR) and is intended for private-sector commercial organisations in the UK.

Individuals have a number of rights in respect of their personal data under the UK GDPR:

•
a right of access
•
rights to rectification, erasure and restriction of processing
•
a right of data portability
•
a right to object to processing
•
a right not to be subject to a decision based solely on automated processing, including profiling

A data subject can make a request to a data controller to exercise one or more of these rights at any time. They do not need to explain their reasons for making a request and there are strict time limits for complying. Responding to a data subject request can be onerous for a data controller and in most cases you cannot charge the data subject for complying with their request.

With this in mind, it is essential to put in place appropriate processes for handling the full range of data subject requests, to make the process as efficient

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Practice Compliance News

Law Society publishes guidance on disability terminology and language

The Law Society of England and Wales has published guidance on disability terminology and language to support employers and employees in the workplace. The guide is aimed at ensuring that the legal profession is using the right words, phrases and acronyms when talking about disability.

SFO launches bribery investigation into defence firm Thales

The Serious Fraud Office (SFO) has initiated an investigation into suspected bribery and corruption involving the multi-national aviation and defence electronics group Thales. This probe is being conducted jointly with the French authority Parquet National Financier (PNF), with each agency operating within its respective jurisdiction. The investigation targets Thales Group, headquartered in Paris, whose UK subsidiary employs over 7,000 staff across 16 sites. SFO director, Nick Ephgrave QPM, highlighted the importance of international collaboration in combating corruption, emphasising the longstanding relationship between the SFO and PNF. The agencies have informed Thales of the investigation and are committed to rigorously pursuing all avenues in their inquiry into these serious allegations.

HM Treasury issues advisory on Oil Price Cap evasion tactics

HM Treasury (HMT)and the Office of Financial Sanctions Implementation (OFSI) have released an advisory concerning the Oil Price Cap (OPC) regime. The guidance specifically addresses evasion strategies involving the manipulation of product origin through the use of fabricated and falsified Certificates of Origin (CO). This advisory aims to alert relevant parties to the risks associated with such practices and to enhance compliance efforts within the oil trade sector.

Practice Compliance weekly highlights—21 November 2024

This week's edition of Practice Compliance weekly highlights includes: the latest financial sanctions updates, three new consultations from the Solicitors Regulation Authority (SRA) on client money management and consumer protection, initiation of a consultation for legal regulators to combat economic crime by the Legal Services Board (LSB), and new guidance from the SRA on internal investigations, together with a suite of guidance for in-house solicitors.

View Practice Compliance by content type :

News