A marketing agency disguised its identity and did not have a functional unsubscribe system in its marketing emails. Additionally, a popular restaurant chain pretended its marketing was a ‘service message’ and a university used dark patterns in its cookies ‘consent’ mechanism.
Tag: uk gdpr
Public bodies often run public consultations on proposals for policy changes – but is it appropriate to publish a list of individual respondents’ names by default? And how does the Right to Object apply to processing based on the public task basis? I discuss this in this case study of my data protection complaint to the Sentencing Council, which constructively took action to resolve my concerns. Photo ID demands and unnecessary cookies also make an appearance – again.
Under Article 17 of the GDPR, you have the right to have most of your personal data deleted. Data controllers must usually comply with your erasure request within one month. But what data can companies typically keep about you after your request – what about invoices, for example? And what can you do if they don’t comply with your request? I discuss the civil court remedies that were available to me when I found out that a company stealthily kept my sensitive personal data, even though I’d asked for it to be deleted months earlier.
Many companies have some form of loyalty rewards scheme and want you to sign up in exchange for your personal data. This often results in you being pestered with marketing emails trying to get you to buy their products. However, even if you sign up for such a loyalty rewards scheme, you have the right to say no to such marketing emails and your choice must be respected.