Last week, the law firm of Pinsent Masons released its “GDPR, a Year In” report, which is pretty much exactly what it sounds like. One particular area of interest is a note about the U.K.’s Information Commissioner’s Office and the fact that the organization was experiencing high levels of “over-reporting.”
So what exactly qualifies as over-reporting? The ICO considers it to be incidents reported by a data controller with the proviso that said incident may not have fallen under the GDPR’s mandatory reporting requirements. In other words, better safe than sorry.
