The rules for making a subject access request (SAR) under the GDPR will be similar to the Data Protection Act 1998. However, there are key…
Under the current Data Protection Act 1998 (DPA) any organisation that processes personal data and sensitive personal data must have a legal basis for doing…
For the most part, individuals’ data protection rights will be the same as they are under the current Data Protection Act but with significant enhancements.…
At the moment, when your organisation collects people’s personal data your privacy notice needs to tell them who you are and how you plan to…
The GDPR EU regulation requires you to maintain records of all your personal data processing activities. In order to do this you need to identify…