The Information Commissioner’s Office (ICO) has updated guidance about the right of access as part of its Guide to the General Data Protection Regulation (GDPR).
The right of access, commonly referred to as subject access, gives individuals the right to obtain a copy of their personal data from you, as well as other supplementary information. It is a fundamental right for individuals. It helps them to understand how and why you are using their data and check you are doing it lawfully.
The guidance and the main areas which have been updated are:
- stopping the clock for clarification,
- what is a manifestly unfounded request?
- what can be included when charging a fee for excessive, unfounded or repeat requests?