Where a third party is making a DSAR on behalf of a data subject then the organisation must satisfy itself that the request being made is genuinely by the individual whose data is being sought.

The article explores, at a high level, recent trends in data privacy litigation, focusing on the deluge of class action filings against businesses for their use of online tracking technologies ...