Why businesses shouldn’t ignore data requests

by | May 10, 2019

The data protection laws allow individuals certain rights in relation to their personal data. One such right is to access their personal information – this is also known as a subject access request (SAR).
In a recent case a housing developer has been prosecution for a failure to respond to a subject access request as required by the legislation. This is after they ignored an enforcement notice from the data watchdog in the UK, the Information Commissioner Office (ICO), which ordered them to comply with the law.
The company pleaded guilty and to a charge of failing to comply with an enforcement notice. It was fined £300, with a £30 victim surcharge, and was ordered to pay £1,133.75 towards prosecution costs.
As you may be aware, the GDPR and the Data Protection Act 2018 came into force on 25 May 2018. The new law changed some of the rules around SAR’s. 
Main points include:
  • A SAR does not require a specific format, it can be in a letter, email or verbal;
  • Organisations must act on the request without undue delay and at the latest within one month of receipt;
  • In most cases organisations cannot charge a fee to deal with a request;
  • Organisations must provide specified information to the person making the request;
  • There are clear rules around calculating the one month time limit.

For further information, or if you have a SAR enquiry, please contact me.

AI in HR: Why Human Expertise Still Matters

Artificial intelligence is rapidly reshaping how HR functions operate. For small and medium sized businesses in particular, the appeal is obvious. AI promises speed, efficiency and access to insights that once required large in house teams or expensive systems. Used...

When and Why You Should Review Contracts of Employment

Keeping Contracts Up to Date Employment contracts are one of the most important documents a business will ever issue. They set the foundation for the working relationship between employer and employee, defining rights, responsibilities, and expectations on both sides....