A stricter regime for profiling07 June 2016
UK ICO Publishes Guidance on Social Networking and Online Forums
Such organizations have a responsibility to take reasonable steps to check the accuracy of any personal data posted on its site by third parties which is presented as a "matter of fact." The ICO does not consider this obligation to require a site operator to check every individual post for accuracy where the vast majority of the site content is posted directly by third parties, the volume of third party posts is significant, site content is not moderated in advance, and the site relies on users to comply with user policies and report problems to the site operator. Reasonable steps in this situation would include:
- having clear and prominent policies for users about acceptable and non-acceptable posts;
- having clear and easy-to-find procedures for data subjects to dispute the accuracy of posts and ask for them to be removed; and
- responding to disputes about accuracy quickly and having procedures to remove or suspend access to content, at least until the dispute has been settled.
The guidance also specifies that organizations operating a social networking site or online forum should have policies sufficient to deal with:
- complaints that personal data may have been processed unfairly or unlawfully because of derogatory, threatening, or abusive postings by third parties;
- disputes between individuals about the factual accuracy of posts; and
- complaints about how the organization processes personal data given to it by its users.
The full guidance can be viewed here.
Edward Southall, a trainee solicitor in our London office, contributed to this entry.
The Regulation aims to strengthen the rights of individuals. It does so by retaining rights that already exist under the Data Protection Directive and introducing the new rights of data...06 June 2016
Grounds for processing03 June 2016