Research Assistant
The ICO has conducted and commissioned several reports on customer satisfaction and information rights. One of the goals of the Information Commissioner’s Office (ICO) Information Rights Strategic Plan 2017-21 is ‘to increase the public’s trust and confidence in how data is used and made available’. It is therefore important for the ICO to gauge the […]
DO Do use a strong password and change it if you think it may have been compromised Do report any loss or suspected loss of data Do be on your guard for fake e-mails or phone calls requesting confidential information – report anything suspicious to the IT Help Desk Do keep software up to date […]
Right to Not Be Subject to Automated Decision Making – art. 12, 22 A data subject has the right to demand human intervention, rather than having important decisions made solely by algorithm. Inform people that they will be subject to algorithmic decision-making and that they can opt out of it. Implement a process and the […]
Right to Object to Processing – art. 12, 21 A data subject has the right to object to being subject to public authorities or companies processing their data without explicit consent. A data subject also has the right to stop personal data from being included in direct marketing databases. An individual can make an objection […]
Right to Data Portability – art. 12, 20 A data subject has the right to move, copy, or transfer personal data from one data controller to another, in a safe and secure way, in a commonly used and machine-readable format. Wherever technically possible, this also includes the right to have the data transferred directly from […]
Right to Restriction of Processing – art.12, 18 A data subject has the right to block or suppress personal data being processed or used. This means that an individual can limit the way that an organisation uses their data. This is an alternative to requesting the erasure of their data. Individuals have the right to […]
Right to Erasure (Right to Be Forgotten) – art. 12, 17 A data subject has the right to have personal data permanently deleted. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. Individuals have the right to have their personal data erased if: the […]
Right to Correction (“Rectification”) – art. 12, 16 Under Article 16 of the GDPR a data subject has the right to have incorrect or incomplete data corrected. An individual may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing. This may involve providing a supplementary […]
Right to Access – art. 12,15 After data is collected, a data subject has the right to know how it has been collected, processed, and stored, what data exists, and for what purposes. Summary: Individuals have the right to access their personal data. This is commonly referred to as subject access. Individuals can make a subject […]
Right to Be Informed – art.12,13,14 Before data is collected, a data subject has the right to know how it will be collected, processed, and stored, and for what purposes. Create easy-to-read policies that provide explicit details on what information is being stored on an individual—and how it will be used. Ensure all data collection processes […]