Failure to share information with a nursing home about a resident’s criminal convictions
28th June 2023
In the examination of any data protection complaint we cannot assume that either party is right. We must examine all the facts of the case before reaching a conclusion. Accordingly, until the matter is concluded, any incidents of infringements are alleged infringements. Once the matter is concluded the outcome will state whether, based on our findings of fact, that the incident occurred or not.
“Personal data” under Article 4(1) of the General Data Protection Regulation (GDPR) is defined as:
Providing personal details to a debt collection agency (data processor) to pursue a debt on behalf of a business or organisation (data controller) does not generally give rise to any data protection concerns. This is covered under the lawful basis of Article 6 (1) (b) of the GDPR “…processing is necessary for the performance of a contract to which the data subject is party”.
A subject access request (SAR) is a request made to a data controller by an individual for a copy of their personal data (as opposed to original documents) which that data controller holds on that individual. Under Article 15 of the General Data Protection Regulation (GDPR) you have a right to obtain a copy of any information relating to you which is kept on computer or in a structured manual filing system or intended for such a system, by any entity or organisation. Making a subject access request allows an individual see what information an entity or company holds on them.
28th June 2023
26th June 2023
25th May 2023
25th May 2023
23rd May 2023
22nd May 2023