Legislation

Getting to grips with GDPR: The right to correct data

The third article in our series on GDPR rights is about the correction right. See here for previous articles on your right to be informed, and the second on the access right.    Part 3: The right to correct data The right to correct inaccurate personal information is an existing right. It has always been the case that if you discover an organisation has inaccurate information about you, you have the right to correct it. It also links with the organisation’s responsibility to have accurate and up to date data.  In current UK law this right is set up as

5 min read

Getting to grips with GDPR: The right to access

The second article in our series on GDPR rights is about the access right. See here for the first article on your right to be informed.   Part 2: The right to access The right to access your own personal information has existed in the UK since 1984. It is considered a cornerstone of privacy law and is often the main way to understand exactly what information an organisation holds about you, and what they are doing with it. GDPR only changes small details of this right. You will continue to have the right to know if the organisation does

5 min read

Getting to grips with GDPR: The right to be informed

You may have been hearing a lot lately about GDPR – the new data protection law that comes into force on 25 May. There is a lot of information and misinformation out there and it can be confusing to understand what’s going on and whether you should be bothered about it. One area of confusion is the rights you have, some of which have been strengthened or amended and some are new. Over the next few weeks we aim to demystify the rights with a series of blog posts – one on each right – to

6 min read

Getting to grips with GDPR: The right to have data restricted

The sixth article in our series on GDPR rights is about the right to have data restricted. Catch up on previous articles on your right to be informed, the access right, correction right,  deletion right, and the right to object.   Part 6: The right to have data restricted This right is not strictly new, as current law provides for a court to be able to order an organisation to restrict their processing of certain data, but GDPR makes it a right you can exercise directly with an organisation. This right is essentially like putting your personal data in limbo

3 min read

Getting to grips with GDPR: The right to object

The fifth blogpost in our series on GDPR rights is about the objection right. Catch up on previous articles on your right to be informed, your access right,  your correction right, and your  deletion right.   Part 5: The right to object There is already a right to object in current UK data protection law (the right to prevent processing), but it is set out a little differently to the GDPR right. In both current law and GDPR there are two aspects to this right: The right to object to direct marketing. The right to object to other processing of

5 min read

Getting to grips with GDPR: The right to request deletion

The fourth article in our series on GDPR rights is about the deletion right. Catch up on previous articles that cover your right to be informed, the access right, and the correction right.   Part 4: The right to request deletion There has been a lot of hype and misleading information about this right and it is often called ‘the right to be forgotten’. The reality is that there is no such right, and it has always been the case that your right is to request deletion, not demand it. This is a complicated right in that it only applies in

8 min read