Children’s Data Rights Under the UK GDPR
Children have enhanced data protection rights under UK GDPR. Learn how companies working with under-18s should comply.
-
-
The Right to Object: When Can a Company Say No?
Article 21 of the UK GDPR gives people the right to object to certain types of data processing. Learn how your company should handle objections.
-
Verifying Identity Before Fulfilling a GDPR Request
You can ask for ID before fulfilling GDPR requests — but only when necessary. Here’s how to verify identity without breaching privacy.
-
Responding to Data Subject Requests: Timelines and Exceptions
Companies must respond to GDPR rights requests within strict timeframes. Here’s what counts as a valid request — and when deadlines can be extended.
-
What Is a DUAA Access Arrangement and When Do You Need One?
An Access Arrangement under the DUAA is a legal requirement for many data-sharing activities. Find out when your company needs one and what it must include.
-
Key Definitions and Scope of the Data Use and Access Act 2025 (DUAA)
Understanding the DUAA starts with the basics. Learn the key definitions—like data user, data provider, access agreement—and the scope of the Data Use and Access Act 2025.
-
When Can You Refuse a Data Subject Request?
Under GDPR, companies can refuse rights requests that are manifestly unfounded or excessive. Learn when and how to lawfully say no.
-
Article 13 vs Article 14 of the UK GDPR: What’s the Difference and Why It Matters
Understand the key differences between Articles 13 and 14 of the UK GDPR, and why your company must tailor privacy notices depending on how personal data is collected.
-
1 of 6: What Is the Data Use and Access Act 2025 (DUAA)?
The Data Use and Access Act 2025 (DUAA) is a landmark UK law that regulates access, sharing, and processing of data across sectors. Learn what DUAA is and how it complements GDPR.
-
Understanding Automated Decision-Making and Profiling
Under Article 22 of the UK GDPR, individuals have rights related to automated decision-making and profiling. Learn how companies should respond.
