data-protection-and-cyberThe right to access to one’s own “personal data”, subject to certain exemptions and limitations, has now been part of UK law for some 30 years. Under the current Data Protection Act 1998 (DPA) an individual dissatisfied with the response to his or her “subject access request” (or “SAR”) can effectively choose whether to enforce those rights via the courts, or via the UK regulator, the Information Commissioner’s Office (“ICO”). Continue reading