Understanding GDPR Data Subject Access Requests: A Practical Guide for Organisations
One important mechanism that empowers individuals (data subjects) under GDPR is the Data Subject Access Request (DSAR).
Our GDPR articles offer in-depth coverage of this landmark regulation. We focus especially on the UK perspective. From compliance strategies to interpretations of specific articles, we provide guidance to help you navigate the complexities of GDPR and its impact on your day-to-day operations.
One important mechanism that empowers individuals (data subjects) under GDPR is the Data Subject Access Request (DSAR).
This action follows discussions with the ICO regarding a controversial pilot program that tracked the GPS locations of up to 600 migrants who entered the UK via unauthorised routes and were in immigration bail.
At Measured Collective, we are always striving to provide the best possible learning experience for our community of over 5,000 people who have joined us to deepen their understanding of data protection and GDPR compliance.
French broadcasting company Groupe Canal+ was recently fined €600,000 by the French data protection authority (CNIL) for multiple violations of the EU’s General Data Protection Regulation (GDPR).
It’s one of the most flexible lawful bases under GDPR but applying it comes with some caveats.
Under Article 13 of GDPR you must give data subjects information about your data processing practices, this is commonly known as the “Right to be informed”.
Without good training, staff will lack the awareness required to complete their day to day tasks in a GDPR compliant manner. They are then more likely to make mistakes which can lead to fines or enforcement action.
Forms are a practical way to gather data but can also be a GDPR compliance risk if not set up correctly.
For the purposes of this article we are defining b2b data as personal data which has been collected within a b2b context.
Marketers should be aware that using these tools and their features can cause a legal compliance headache when it comes to data privacy laws like GDPR because of the sheer volume of personal data and data transfers required to make these campaigns work.