Beyond the Backlog: Lessons from Bristol City Council’s Data Rights Failures

The right to access personal data held by public authorities, formally known as a Subject Access Request (SAR), is a fundamental part of UK data protection law. When that right is not upheld, individuals can be left without vital information that may affect their lives, legal cases, or understanding of their own histories. Recent findings […]

ICO Reprimand: Finham Park Multi Academy Trust and GDPR Failures

ICO Reprimand: Finham Park Multi Academy Trust and GDPR Failures On 26 October 2023, the Information Commissioner’s Office (ICO) issued a formal reprimand to Finham Park Multi Academy Trust (FPMAT) for serious breaches of the UK General Data Protection Regulation (UK GDPR). The reprimand highlights repeated failures to secure personal data appropriately, with shortcomings that […]

GDPR Reprimand: Chelmer Valley High School and the Lessons for Education

GDPR Reprimand: Chelmer Valley High School and the Lessons for Education The Information Commissioner’s Office (ICO) has issued a reprimand to Chelmer Valley High School (22/07/2024) after it was found to have breached the UK General Data Protection Regulation (UK GDPR). The case centres on the school’s introduction of facial recognition technology in its cashless […]