Following the introduction of the GDPR on 25 May 2018, data subjects were granted a broad range of rights, some of which did not exist under the previous regime.
Handling data subject requests can often be time consuming and technically challenging, therefore posing a headache for many businesses.
We regularly advise businesses dealing with all manner of data subject requests, including in relation to:
- the process to be followed to extract the correct data in relation to data subject requests
- strategic steps which can be taken to ease the burden of dealing with the request
- the timeframe for responding to requests and whether this can be extended, and
- exemptions applicable under the GDPR and Data Protection Act 2018 which exclude certain data from the scope of the request.
We advise clients from a broad range of industries on their handling of data subject requests, including innovative fintech companies, financial and professional services firms including UK and US law firms, and multinational businesses in UK, as well as international organisations.
