Re:The Nightmare Letter: A Subject Access Request Under GDPR
by raverbashing on Saturday March 17, 2018 @09:18AM
(#16606827)
> it places an impossible burden on the recipient
Which items do you feel are an impossible burden?
From what I see most of the items pertain to one of two possibilities:
1 - General procedures or information about the company (keep this updated and it's the same for all requests)
2 - Information about the subject (export their data in an automated fashion)
The thing about 'decisions based on their data' might be tricky, but I guess you can share what you concluded from it and the overall rationale (for example, Facebook's "Why am I seeing this" over an ad)
Which items do you feel are an impossible burden?
From what I see most of the items pertain to one of two possibilities:
1 - General procedures or information about the company (keep this updated and it's the same for all requests)
2 - Information about the subject (export their data in an automated fashion)
The thing about 'decisions based on their data' might be tricky, but I guess you can share what you concluded from it and the overall rationale (for example, Facebook's "Why am I seeing this" over an ad)