The Strategic Weaponisation of DSARs
Article 15 of the General Data Protection Regulation (GDPR) sets out a legal right enabling individuals to obtain access to their personal information being processed by organisations.

Article 15 of the General Data Protection Regulation (GDPR) sets out a legal right enabling individuals to obtain access to their personal information being processed by organisations.
Public sector bodies often face increasing pressure to meet legal obligations efficiently. KPDP Consultancy provides a trusted, structured response framework for handling complex FOIA and EIR cases—ensuring transparency, confidentiality, and compliance.
The UK General Data Protection Regulation (UK GDPR) applies to all organisations in the UK, as well as to controllers and processors based outside the UK if they’re processing offers, goods or services to individuals in the UK, or monitors the behaviour of individuals as far as their behaviour takes place within the UK.
In May 2024 Unite (the “Union”) published an article raising serious concerns that Brighton and Hove Buses, part of the Go-Ahead Group had installed covert audio recording devices on some of its buses spying on passengers and drivers.
Article 15 of the General Data Protection Regulation (GDPR) sets out a legal right enabling individuals to obtain access to their personal information being processed by organisations.