Data Subjects Rights

In the recent Brillen Rottler ruling, the court addressed the issue of abusive Data Subject Access Requests (DSARs), highlighting that even a first-time request can be deemed excessive if it appears to be a tactic for compensation rather than a genuine inquiry. This landmark decision emphasizes the importance of robust data management practices for organizations. As a data protection consultant, I believe this ruling is a turning point for corporate risk management, urging businesses to adopt proactive compliance strategies to safeguard against potential claims. Discover how to navigate these challenges effectively and protect your organization.

The impact of AI on DSARs has become one of the fastest-moving trends in UK data protection. Generative AI tools like ChatGPT and Gemini now let anyone produce a legally sophisticated data subject access request in seconds, rather than the polite, hand-written letters DPOs used to receive. For data protection teams, this shift raises a

Public authorities handling Freedom of Information requests face a genuine balancing act. FOI and data protection compliance sit side by side. Get the balance wrong, and you risk a personal data breach, an ICO complaint, or reputational damage. Freedom of Information (FOI) legislation gives citizens a right to see how public bodies operate. UK GDPR

A Data Subject Access Request (DSAR) is one of the most common ways people exercise their rights under UK GDPR, and DSAR management software is what turns that legal obligation into a manageable, repeatable process for resource-constrained teams. Every organisation that processes personal data can receive a DSAR at any time, from an employee, customer,