ANALYSIS: Subject Access Requests Under EU And UK Law: The Problems With Unstructured Data
May 21, 2012 in World Data Protection Report
One of the key rights for individuals under the EU Data Protection Directive is to access their personal data by making a “subject access request”. The right is important, as it allows individuals to verify the accuracy of any personal data held about them and the lawfulness of the processing of that data.
Whilst this right sounds straightforward, it can be difficult to comply with in practice. Data controllers have had to contend with the growth of unstructured electronic data such as emails. Responding to broad requests from individuals for “all” personal data held about them in an unstructured format can be very difficult, if not impossible. …
