header-logo header-logo

16 October 2019 / Elizabeth Bardsley
Issue: 7864 / Categories: Features , Insurance / reinsurance , Data protection , Technology
printer mail-detail

Data breaches: a personalised response

Elizabeth Bardsley explains why tailoring response to identity can help data controllers avoid breach claims
  • When a data breach occurs, controllers need to act fast but also consider the identity of the individuals concerned.
  • Appropriate responses may vary. Consider factors such as potential resentment against the controller, employment status and age.

Following a personal data breach, what can data controllers do to limit their exposure to data breach claims? And to what extent should breach response be shaped by the identities of the data subjects themselves?

The rise in data breach claims has been well reported. This is largely a direct result of the GDPR (General Data Protection Regulation) giving data subjects a statutory right to claim compensation for non-material damage in addition to material (financial). Claimants can therefore seek awards for inconvenience or distress caused by the loss or unauthorised disclosure of their data; a much lower threshold than earlier data protection law.

This, along with the onerous notification obligations the GDPR places upon data controllers,

If you are not a subscriber, subscribe now to read this content
If you are already a subscriber sign in
...or Register for two weeks' free access to subscriber content

MOVERS & SHAKERS

Switalskis—Naila Arif, Harriet Findlay & Ellie Thompson

Switalskis—Naila Arif, Harriet Findlay & Ellie Thompson

Firm awards training contracts to paralegals through internal programme

Ward Hadaway—Matthew Morton

Ward Hadaway—Matthew Morton

Private client disputes specialist joins commercial litigation team

Thomson Hayton Winkley—Nina Hood

Thomson Hayton Winkley—Nina Hood

Cumbria firm appoints new head of residential property

NEWS
Freezing orders in divorce proceedings can unexpectedly ensnare third parties and disrupt businesses. In NLJ this week, Lucy James of Trowers & Hamlins explains how these orders—dubbed a ‘nuclear weapon’—preserve assets but can extend far beyond spouses to companies and business partners 
A Court of Appeal ruling has clarified that ‘rent’ must be monetary—excluding tenants paid in labour from statutory protection. In this week's NLJ, James Naylor explains Garraway v Phillips, where a tenant worked two days a week instead of paying rent
Three men wrongly imprisoned for a combined 77 years have been released—yet received ‘not a penny’ in compensation, exposing deep flaws in the justice system. Writing in NLJ this week, Dr Jon Robins reports on Justin Plummer, Oliver Campbell and Peter Sullivan, whose convictions collapsed amid discredited forensics, ‘oppressive’ police interviews and unreliable ‘cell confessions’
A quiet month for employment cases still delivers key legal clarifications. In his latest Employment Law Brief for NLJ, Ian Smith reports that whistleblowing protection remains intact even where disclosures are partly self-serving, provided the worker reasonably believes they serve the ‘public interest’ 
Family law must shift from conflict-driven litigation to child-centred problem-solving, according to a major new report. Writing in NLJ this week, Caroline Bowden of Anthony Gold outlines findings showing overwhelming support for reform, with 92% agreeing lawyers owe duties to children as well as clients
back-to-top-scroll