Respect My Data.

Enforcing respect for data, privacy & consumer rights | 2021-2024

Taken to court: webshops refusing to act on my GDPR requests

I sent two IT webshop companies an erasure request. I also informed them of a security vulnerability in the way they processed my invoices and I objected to them processing my invoice data in this way. The companies repeatedly refused to act on my GDPR requests and they failed to acknowledge the vulnerability. So I took them both to court.

Falling foul of the rules on direct marketing emails could be a costly mistake

Organisations must comply with strict rules if they want to send electronic direct marketing mail to people. Many organisations send out legitimate ‘service’ emails, but some choose to add advertising, marketing or promotional material to their supposed ‘service’ emails in an attempt to circumvent the direct marketing rules. Of course, it doesn’t quite work like that and mistakes can be costly

GDPR Subject Requests and Photo ID: why routinely asking for photo ID is a mistake

I sent a UK company a GDPR erasure request, but they demanded that I email them a copy of my driving licence before actioning my request. Here’s what happened when I challenged their intrusive, unsecure and likely unlawful demand…

Highways England’s Lacking Red X Enforcement

ICO orders Highways England to provide information on the number of cameras used to enforce the Red X following FOI request, and the figures are worrying…

Page 2 of 2

Powered by WordPress & Theme by Anders Norén