A Practical Guide to Managing GDPR Data Subject Access Requests - Second Edition - Patrick O'kane

Descriere A Practical Guide to Managing GDPR Data Subject Access Requests - Second Edition - Patrick O'kane

\nSecond Edition including updated case law and legal references. \nHow should your company or law firm respond to requests from people who want to access their personal data? \nGDPR gives individuals the right to access and seek a copy of all of the personal data your company holds on them. This may include access to emails, call recordings, CCTV footage and any other record containing their personal data. \nA study showed that companies spend up to 1.58 million per year dealing with GDPR Data Subject Access Requests ('DSARs'/'Access Requests'). The Information Commissioner's Office receives more complaints on Access Requests than any other issue. \nAccess Requests are a legal minefield. If Access Requests are mishandled, they can leave companies open to fines, litigation and reputational damage. \nThis concise practical guide explains how to comply with Access Requests under GDPR. The book explains how to: \nRecognise Access RequestsUnderstand the UK data protection framework post-BrexitComply with the rules and time limits on Access RequestsFind the personal dataRedact the personal dataUnderstand the exceptions to Access RequestsAssess how legal professional privilege impacts Access RequestsDeal with Access Requests from your own employeesDraft a staff policy on Access RequestsTrain Staff on Access RequestsDeal with other GDPR rights such as the 'Right to Erasure'Draft responses to employees and clients seeking access to their personal data \nThis book aims to put your company on the right side of GDPR Data Subject Access Requests. \nABOUT THE AUTHOR \nPatrick O'Kane is a in-house barrister with a large multinational organisation. Patrick is also the author of the books 'GDPR: Fix it Fast - How to Apply GDPR to Your Company in Ten Steps' and 'A Practical Guide to GDPR in Financial Services'. He has written on Privacy for numerous journals and magazines. \nCONTENTS \nChapter 1 - What is an Access Request?Chapter 2 - Which Categories of Data Can a Person Access?Chapter 3 - Access Requests: The FormalitiesChapter 4 - The SearchChapter 5 - Third Party DataChapter 6 - Training Staff on Access RequestsChapter 7 - Employee Access RequestsChapter 8 - Further Rights Under GDPRChapter 9 - ExemptionsChapter 10 - Frequently Asked QuestionsAppendix 1 - Templates for Responding to Access RequestsAppendix 2 - Access Request Policies

Detalii

Brand

Law Brief Publishing

Categorie

ENSTK

EAN / GTIN

9781914608544

Magazine

1

Disponibilitate

in stock