Individual data subjects (consumers and employees) have a number of individual rights under data protection legislation. In addition to data subject access requests, individuals have right to request that personal data held or processed about them is corrected, restricted or erased. Levels of public awareness through public campaigns and new requirements to issue detailed privacy information to individuals is likely to result in an increase in the exercise of such rights.
Responses to such requests must be provided free of charge, promptly and with the correct privacy information. Such rights are not absolute and caution must be taken so as not to unnecessarily compromise commercial interests or the privacy rights of third parties. An internal protocol on how to handle such requests can be a useful tool to avoid delay, wasted time and risk.
Myerson can provide advice and assistance in developing an appropriate protocol or procedure to ensure that responses to such requests are compliant, timely and consistent. We can also provide guidance and assistance in responding to such claims, providing advice on appropriate response, applicable exemptions and the required privacy information.