- The ICO have during May produced updated guidance in a number of areas:
- They have published detailed guidance on Data Protection Impact Assessments (DPIAs).
- They have published detailed guidance on consent.
- They have expanded the page on the right to data portability.
- In the News – The ICO serves an enforcement notice on SCL Elections Limited over an inadequate response to a data subject access request and has forced them to give an academic all the personal information the company holds about him.
Information Commissioner Elizabeth Denham has in relation to the case said “The company has consistently refused to co-operate with our investigation into this case and has refused to answer our specific enquiries in relation to the complainant’s personal data – what they had, where they got it from and on what legal basis they held it.
“The right to request personal data that an organisation holds about you is a cornerstone right in data protection law and it is important that Professor Carroll, and other members of the public, understand what personal data Cambridge Analytica held and how they analysed it.
“We are aware of recent media reports concerning Cambridge Analytica’s future but whether or not the people behind the company decide to fold their operation, a continued refusal to engage with the ICO will potentially breach an Enforcement Notice and that then becomes a criminal matter.”
- The ICO has posted a blog post to “bust another myth” about the consent requirement under GDPR: https://iconewsblog.org.uk/2018/05/09/raising-the-bar-consent-under-the-gdpr/