Beyond the Backlog: Lessons from Bristol City Council’s Data Rights Failures

The right to access personal data held by public authorities, formally known as a Subject Access Request (SAR), is a fundamental part of UK data protection law. When that right is not upheld, individuals can be left without vital information that may affect their lives, legal cases, or understanding of their own histories. Recent findings […]

ICO Reprimand: Finham Park Multi Academy Trust and GDPR Failures

ICO Reprimand: Finham Park Multi Academy Trust and GDPR Failures On 26 October 2023, the Information Commissioner’s Office (ICO) issued a formal reprimand to Finham Park Multi Academy Trust (FPMAT) for serious breaches of the UK General Data Protection Regulation (UK GDPR). The reprimand highlights repeated failures to secure personal data appropriately, with shortcomings that […]