News for hackers. Stuff that matters.
Re:The Nightmare Letter: A Subject Access Request Under GDPR by geocar on Saturday March 17, 2018 @12:43PM (#16607736)
How many of these requests do you expect?

I imagine most companies might only deal with this once or perhaps twice ever, and if they do not keep very much personal data then automating it would not be very efficient use of their time. That's why in general I'd wait until you get such a request, ask your lawyer to explain it (will probably only cost a few hundred pounds), then decide what to do next.

Only very large companies (or companies that deal with a lot of personal data) will benefit from up-front automation.

Re:The Nightmare Letter: A Subject Access Request Under GDPR by tobr on Saturday March 17, 2018 @01:37PM (#16608058)
Since the content of the request is very generic and applies to almost any individual and business, it's not unthinkable that it will be automated on the other end, so anyone can push a button and send the request to hundreds of companies of their choosing.

I certainly have several businesses in mind that I plan to send requests to once GDPR is in place.

EDIT: Although I suppose small, non-EU businesses that mostly do not deal with personal data are unlikely to receive any requests. So you are probably right that "most companies" are unlikely receive GDPR requests.

Re:The Nightmare Letter: A Subject Access Request Under GDPR by kuschku on Saturday March 17, 2018 @02:06PM (#16608199)
It’s already been automated.

https://selbstauskunft.net/ exists to allow you to send a BDSG §34 request (like GDPR request, but under the older German law for it) to basically any company. You select the company, sign it, and they automate all other steps.

I’ve sent dozens just this week.

Re:The Nightmare Letter: A Subject Access Request Under GDPR by Jdam on Saturday March 17, 2018 @02:53PM (#16608433)
Do you actually read the dozens of responses? Or are you just doing it to annoy people?
Re:The Nightmare Letter: A Subject Access Request Under GDPR by madez on Saturday March 17, 2018 @05:37PM (#16609195)
Yes, I read the responses and take action upon them. The last time I quit my bank account to move to a different bank.

Also, I'd recommend sending another request some time after quiting your contract with the company, just to make sure they give you a written guarantee that they deleted all data about you they don't _seriously have to_ maintain.

Re:The Nightmare Letter: A Subject Access Request Under GDPR by qznc on Saturday March 17, 2018 @03:45PM (#16608709)
I intend to use it as well. Since I'm about to move, I wait until I have the new address. Yes, I'm interested what I will get in return.

I also consider it activism to keep companies aware of their responsibilities.

Re:The Nightmare Letter: A Subject Access Request Under GDPR by briandear on Saturday March 17, 2018 @06:01PM (#16609278)
..and drive up the cost of goods and services.

Does anyone actually understand that this law will make things cost more?

Re:The Nightmare Letter: A Subject Access Request Under GDPR by lagadu on Saturday March 17, 2018 @06:33PM (#16609398)
Keeping my data private has costs associated with it? What a shocker!

Do you also argument against mandatory seatbelts? All they do is drive the cost of cars up. The justice system that works to enforce the laws brings the taxes up should we get rid of it too?

Re:The Nightmare Letter: A Subject Access Request Under GDPR by mercer on Sunday March 18, 2018 @10:50AM (#16612174)
This guy being the equivalent of a car manufacturer in your analogy...
Re:The Nightmare Letter: A Subject Access Request Under GDPR by gsich on Saturday March 17, 2018 @06:04PM (#16609287)
Maybe. But it's worth it.
Re:The Nightmare Letter: A Subject Access Request Under GDPR by kuschku on Saturday March 17, 2018 @10:11PM (#16610146)
I read them, and often I make decisions based on this — or can use it to convince e.g. my family to stop using payback (a discount scheme where a company logs all your purchases, even cash ones, and you get ~1% cashback).
Re:The Nightmare Letter: A Subject Access Request Under GDPR by gsich on Saturday March 17, 2018 @03:42PM (#16608688)
Why do you think otherwise?
Re:The Nightmare Letter: A Subject Access Request Under GDPR by benologist on Saturday March 17, 2018 @02:12PM (#16608233)
I think if you can easily automate it this is the time to because it will make everything easier as privacy rights continue their spread to additional countries and on to the UN's charter on human rights. Granting the rest of your users the same rights before they officially have them seems the right thing to do because it does not seem ethical to only uphold some of your users privacy.