In-depth articles on GDPR compliance, DSARs, data governance, and privacy operations.
Data Subject RightsYou re redesigning your privacy notice. Your legal team wants to list a phone number for rights requests. Your customer service team suggests using your existing premium-rate line to handle the volume
Data Subject RightsThe CNIL s April 2025 audit of EXTIA revealed a compliance breakdown that should prompt every DSAR operator to reassess their processes. Of 265 erasure requests received in 2024, more than three-quart
Data Subject RightsThe Conventional Wisdom Many DSAR teams think they ve nailed erasure compliance by using automated deletion workflows. They set up retention policies, configure systems to purge records after a set pe
Data Subject RightsUnderstanding the Issue The challenge isn t a single incident but a widespread issue affecting organizations using AI. When individuals exercise their Article 17 erasure rights, many organizations str
Get weekly security insights and compliance updates delivered to your inbox.
Data Subject RightsWhen a data subject asks you to remove their name from your online archive, you re facing a decision that pits Article 17 against Article 85 . Get it wrong, and you ll either expose your publication t
Data Subject RightsWhen an employee submits a data subject access request (DSAR) during a workplace dispute, you face a dilemma: do you disclose the names of colleagues who ve commented on their performance, raised conc
Data Subject RightsScope - What This Guide Covers This guide tackles the operational challenge of managing data subject access requests (DSARs) and Freedom of Information (FOI) requests enhanced by large language models
Data Subject RightsThese questions come from conversations with DPOs and in-house counsel over the past year. The UK Supreme Court s decision in ZXC v Bloomberg changed how we think about privacy during criminal investi
Data Subject RightsUnderstanding the Shift The GDPR has evolved, with its private right of action provisions now forming a distinct litigation channel. Class actions alleging violations under Article 82 (right to compen
Data Subject RightsYour team processes erasure requests. Someone objects to direct marketing. Another person wants their account deleted. You respond within 30 days, document the decision, and move on. But are you actua
