The inception of the General Data Protection Regulation (‘GDPR’) in May 2018 has made it easier for individuals within the UK and the EU (and sometimes those based elsewhere) to assert their data protection rights to object to the inclusion of false or outdated information about them in risk/compliance databases. Continue reading