Data Protection

AEPD Resolution on GDPR Rights Procedure

The Spanish Data Protection Agency (AEPD) has issued a resolution regarding a GDPR rights procedure. The resolution addresses a complaint where a data subject exercised their right of access, and the data controller failed to provide a legally established response within the stipulated timeframe. The AEPD admitted the claim for processing.

ICO Open Letter to Tech Firms on Age Checks and Child Data Protection

The UK's Information Commissioner's Office (ICO) has issued an open letter to social media and video-sharing platforms, urging them to strengthen age assurance measures to prevent underage children from accessing services. The ICO expects platforms to move beyond self-declaration and utilize available technology to enforce minimum age requirements.

ICO Fines Police Scotland £66,000 for Data Mishandling

The ICO has fined Police Scotland £66,000 and issued a reprimand for serious data mishandling. Failures included excessive mobile phone data extraction and unlawful disclosure of sensitive personal information to a third party, violating UK GDPR and the Data Protection Act 2018.

GDPR Resolution: No Fine for DILCAR Gestión S.L.

The Spanish Data Protection Agency (AEPD) has closed an investigation into DILCAR Gestión S.L. regarding the misuse of municipal resources for private business, which involved personal client data. No fine was imposed on the company.

GDPR Resolution: School Used Health Data Without Consent

The Spanish Data Protection Agency (AEPD) initiated a sanctioning procedure against HOLY MARY CATHOLIC SCHOOL, S.L. for allegedly using student health data without proper consent. The procedure was initiated following a complaint filed on April 24, 2024, regarding the use of 'Google Workspace for Education' and its potential access to non-educational content.

ICO Upholds FOI Complaint Against NHS Trust

The ICO has upheld a Freedom of Information (FOI) complaint against South London & Maudsley NHS Foundation Trust for a delayed response. The Trust is required to provide a substantive response to the complainant within 30 calendar days.

Ofcom - Vexatious FOI Request Regarding Channel 4 Chairs

The ICO has decided that Ofcom was entitled to refuse a request for information about Channel 4's former and interim Chairs, deeming the request vexatious under FOI law. No further action is required by Ofcom.

ICO Decision Notice: Lambeth Failed FOI Request

The UK's Information Commissioner's Office (ICO) has issued a decision notice upholding a complaint against the London Borough of Lambeth for failing to respond to a Freedom of Information (FOI) request within the statutory 20-day period. The ICO requires Lambeth to respond to the complainant within 30 calendar days.

ICO Upholds FOI Complaint Against Pentraeth Council

The ICO has upheld a Freedom of Information complaint against Pentraeth Council for failing to respond to a request within the statutory 20 working days. The Council has been ordered to respond to the complainant within 30 calendar days.

ICO Decision Notice: FOI Complaint Against London Borough of Croydon

The UK's Information Commissioner's Office (ICO) has upheld a Freedom of Information (FOI) complaint against the London Borough of Croydon. The authority failed to respond to a request within the statutory 20 working days. The ICO has ordered the council to respond within 30 calendar days.