Public bodies often run public consultations on proposals for policy changes – but is it appropriate to publish a list of individual respondents’ names by default? And how does the Right to Object apply to processing based on the public task basis? I discuss this in this case study of my data protection complaint to the Sentencing Council, which constructively took action to resolve my concerns. Photo ID demands and unnecessary cookies also make an appearance – again.
Tag: photo id
I sent a UK company a GDPR erasure request, but they demanded that I email them a copy of my driving licence before actioning my request. Here’s what happened when I challenged their intrusive, unsecure and likely unlawful demand…