{"id":5610,"date":"2021-03-06T16:34:35","date_gmt":"2021-03-06T16:34:35","guid":{"rendered":"https:\/\/davelevy.info\/wiki\/?p=5610"},"modified":"2022-01-04T19:20:47","modified_gmt":"2022-01-04T19:20:47","slug":"manifestly-unfounded-or-excessive","status":"publish","type":"post","link":"https:\/\/davelevy.info\/wiki\/manifestly-unfounded-or-excessive\/","title":{"rendered":"manifestly unfounded or excessive"},"content":{"rendered":"<p>It seems some organisations have caught up with the ability to refuse a DSAR because the request is manifestly unfounded or excessive. I am not sure where in the GDPR this was permitted, by which I mean, I don&#8217;t think it was. Here are some links. <!--more--><\/p>\n<p>O&#8217;Donahue and Bateman say,<\/p>\n<blockquote><p>Where <strong>it is obvious or clear<\/strong> (\u201cmanifestly\u201d) that the individual has no intention to access the information or is malicious in intent, and\/or is using the request to harass with no real purposes other than to cause disruption.<\/p><\/blockquote>\n<ol>\n<li><a href=\"https:\/\/web.archive.org\/web\/20211108063431\/https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/guide-to-law-enforcement-processing\/individual-rights\/manifestly-unfounded-and-excessive-requests\/\">Manifestly unfounded and excessive requests<\/a>, from the ICO<\/li>\n<li>The <a title=\"Data Protection Act 2018\" href=\"https:\/\/www.legislation.gov.uk\/ukpga\/2018\/12\/contents\/enacted\">Law<\/a>, as enacted, we need \u00a7 53<\/li>\n<li><a href=\"https:\/\/www.technologylawdispatch.com\/2020\/06\/data-cyber-security\/responding-to-requests-the-ico-considers-manifestly-unfounded-and-excessive-requests\/\">Responding to requests: the ICO considers manifestly unfounded and excessive requests <\/a>, by O&#8217;Donahue &amp; Bateman from Reed Smith<\/li>\n<li><a href=\"https:\/\/www.gov.uk\/guidance\/information-rights-appeal-against-the-commissioners-decision\">Information rights and data protection: appeal against the Information Commissioner <\/a>at gov.uk<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>It seems some organisations have caught up with the ability to refuse a DSAR because the request is manifestly unfounded or excessive. I am not sure where in the GDPR this was permitted, by which I mean, I don&#8217;t think it was. Here are some links.<\/p>\n","protected":false},"author":1,"featured_media":4743,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_share_on_mastodon":"0"},"categories":[84],"tags":[85,955,1392,1591],"class_list":["post-5610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business","tag-business-2","tag-data-protection","tag-dsar","tag-ico"],"share_on_mastodon":{"url":"","error":""},"jetpack_featured_media_url":"https:\/\/davelevy.info\/wiki\/wp-content\/uploads\/2020\/01\/dsar-dporganiser-w650x200-cropped.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/5610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/comments?post=5610"}],"version-history":[{"count":2,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/5610\/revisions"}],"predecessor-version":[{"id":6143,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/5610\/revisions\/6143"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/media\/4743"}],"wp:attachment":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/media?parent=5610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/categories?post=5610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/tags?post=5610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}