When Can You Refuse a Data Subject Request?
Under GDPR, companies can refuse rights requests that are manifestly unfounded or excessive. Learn when and how to lawfully say no.
-
-
How Long Should You Keep DPIA Records?
DPIAs must be documented — but for how long? Here’s what the UK GDPR says about retention.
