In October 2020, the ICO published its final guidance on the right of access under the GDPR. Following consultation, the ICO has made some important changes and additions to its the draft guidance (published in December 2019). These include provisions on the process for clarifying a request, the circumstances in which a request may be manifestly excessive, how fees may be calculated (where a fee is permitted), and how data may be sent securely. The changes could have a significant impact on the approach which organisations take to addressing access requests.
Olivia Whitcroft, principal of OBEP, 1 December 2020
This article provides general information on the subject matter and is not intended to be relied upon as legal advice. If you would like to discuss this topic, please contact Olivia Whitcroft using the contact details set out here: Contact Details