Re:Ask HN: Is HN GDPR compliant?
by dangrossman on Sunday April 29, 2018 @11:34PM
(#16955525)
The GDPR explicitly says you may charge a reasonable fee to cover your administrative costs.
[ Parent
| on HN ]
Oh! I totally missed that. Thank you for the correction.
Not meaning to be argumentative, but is there a reference for that beyond Article 12 Section 5? (I probably missed that too.) But that section seems to suggest you can only charge a fee (or even decline to act) if the requests are unfounded or repeatedly excessive:
https://gdpr-info.eu/art-12-gdpr/
"Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:
charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or
refuse to act on the request.
(Google's clause was opting to charge for any deletion request that is not yet automated.)