45 articles · All articles

Claiming compensation for a data breach: the court route the ICO cannot give you

The ICO can investigate a data breach and fine the organisation – but it cannot award the victim a penny. Compensation only comes from a civil claim under Article 82 of the UK GDPR and section 168 of the Data Protection Act 2018, which expressly covers distress. This guide explains what a claimant must prove, what Lloyd v Google changed, realistic quantum for distress-only cases, and whether your breach is a court claim, an ICO complaint, or both.

The ICO’s Ineffectiveness in Handling My GDPR Complaint: What Comes Next

Data protection · SAR enforcement · ICO accountability A Subject Access Request is not a favour. It is a legal right. When a controller fails to respond and the regulator’s response feels limited, the question is not only whether one request has been mishandled. It is whether individual data rights are being enforced with enough … Continue reading “The ICO’s Ineffectiveness in Handling My GDPR Complaint: What Comes Next”