Re:Ask HN: Is HN GDPR compliant?
by dangrossman on Sunday April 29, 2018 @11:34PM
(#16955525)
The GDPR explicitly says you may charge a reasonable fee to cover your administrative costs.
Oh! I totally missed that. Thank you for the correction.
Not meaning to be argumentative, but is there a reference for that beyond Article 12 Section 5? (I probably missed that too.) But that section seems to suggest you can only charge a fee (or even decline to act) if the requests are unfounded or repeatedly excessive:
https://gdpr-info.eu/art-12-gdpr/
"Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:
charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or
refuse to act on the request.
(Google's clause was opting to charge for any deletion request that is not yet automated.)
"Google may charge a fee (based on Google’s reasonable costs) for any data deletion under Section 6.1.2(a). Google will provide Customer with further details of any applicable fee, and the basis of its calculation, in advance of any such data deletion."