Last week, the law firm Pinsent Masons released its GDPR, a Year In report, which is pretty much exactly what it sounds like. One particular area of interest is a note about the U.K.’s Information Commissioner’s Office (ICO) and the fact that the organisation was experiencing high levels of “over-reporting”.
So what exactly qualifies as over-reporting? The ICO considers it to be incidents reported by a data controller with the proviso that said incident may not have fallen under the GDPR’s mandatory reporting requirements. In other words, better safe than sorry.
