Data Breaches and Subject Access Requests

If you’re dealing with a data breach right now, the most useful thing you can do is get advice quickly. The first hours matter, and the sooner the incident is contained and the right steps are taken, the better the position you’ll be in. Call us on 01749 836100.

Data breaches happen to careful businesses, not just careless ones. A cyber attack, a mistake, an email sent to the wrong list, a gap in your security: any of these can put personal data where it shouldn’t be. When it happens, the law puts you on a tight timeline, so quick, clear-headed advice makes a real difference.

When it happens, we help you take control:

• Contain the incident and limit the damage
• Work out what has to be reported, to the ICO or to the people affected, and by when
• Handle the regulatory side, so you can concentrate on the business

And if you’re not in the middle of a breach but want to be ready for one, we can help you put protocols in place now, while there’s time to think.

Subject access requests are less urgent but can be just as demanding. Someone has the right to ask for the personal data you hold on them, and responding properly can mean pulling information out of several systems, working through large volumes of it and redacting what you’re not allowed to share. It takes time, and there are rules about how and when you reply.

We can take that weight off your team, managing the request and the correspondence around it so your response goes back on time and stays within the law.

In a breach, the first few hours count. Don’t spend them wondering who to call.