How to handle data subject access requests under the UK GDPR

- Posted in data protection by
This blog post is a short(ish) guide to the core issues in handling subject access requests under the UK GDPR. If you have received a request and you are not sure where to start, this will help you Read more

Dealing with demands for communications data under the Investigatory Powers Act 2016

- Posted in telecoms by
This blog post looks at the obligations imposed on telecommunications operators under the Investigatory Powers Act 2016, to provide communications data in response to a notice from UK public Read more

Five things to take from the European Parliament's response to the Commission on the GDPR

- Posted in privacy by
The European Parliament has published its report on the European Commission's report on the implementation of the GDPR, which the Commission published two years after its application. Yes, it's a Read more

Four legal tips to keep your business running smoothly in 2021

- Posted in business by
1 The pandemic is getting worse, democracy in the USA seems to have collapsed, and if you have to say "you're still on mute" one more time, you'll explode. And it's only the 11th of January. Here are Read more

Ain't no party like a virtual Christmas party

- Posted in hosting by
1 Over the weekend, some enterprising spammer bothered my inbox with a message to say that they were offering "virtual Christmas parties", and that perhaps decoded.legal might like to make a booking Read more

The EDPB's opinion on the UK/US data access agreement under the CLOUD Act

- Posted in telecoms by
1 Some of you may be aware that, in addition to the work I do more generally for telecoms providers and ISPs, I have a particular interest in investigatory powers, and obligations imposed by the Read more

Brexit: a data protection checklist for UK controllers

- Posted in data protection by
Yes. Well. Brexit. It had to come up at some point, I guess. The UK enjoys a beneficial position, from a data protection point of view, from its membership of the EU. Once we are no longer in the EU, Read more

GDPR: it's not too late

- Posted in data protection by
Although the GDPR took effect in May 2018 — almost two years ago now — decoded.legal gets approached a lot by companies which have heard of it but done nothing or very little. Should they have Read more

Time to change your personal data diet?

- Posted in data protection by
It's the time of year when many people (me included) try to shed off the excesses of Christmas and New Year by eating more healthily. Rather than going on a crash diet, you're encouraged to change Read more

Have you paid your "data protection fee"?

- Posted in data protection by
The Information Commissioner's Office announced earlier this month that it was writing to the directors of every company in the UK, "reminding them of their legal responsibility to pay a data Read more