GDPR Hub

Individuals are entitled under UK and EU data protection legislation to request a copy of their “personal data” from an organisation which holds it. In broad terms, “personal data” is information about or relating to that individual.

It is more than a year now since the introduction of Europe’s new data privacy regime, the GDPR. After a flurry of activity leading up to and following the launch date in May 2018, GDPR fell out of the headlines. Recent high profile penalty announcements running into the hundreds of millions have again highlighted the dangers of failure to comply. We consider some of the issues that are keeping business leaders and privacy regulators awake at night.

We have seen substantial shifts in market practice in risk allocation between service providers and their customers. Data protection expert Peter Wainman reviews the state of play, and considers how far contracting parties can go in allocating risk between them.

Health and care bodies must make sure they hold and use information in a way which is compliant with the new data processing conditions. There is now a big difference between consent to data processing and consent to treatment.