Data Subject Access Requests

Data Subject Access Requests

Individuals will have more information on how their data is processed and this information should be available in a clear and understandable way.

Where requests to access data are manifestly unfounded or excessive, SMEs will be able to charge a fee for providing access.

DSAR’s must be executed “without undue delay and at the latest within one month of receipt of the request.”

Subject access requests must also give all the information relating to purposes that should have been provided upon collection.

The Right to Data Portability

Clearly focussed on helping drive competition between service providers this part of the regulation seeks to drive automated transfers of data (using a common format yet to be defined) between services which primarily process customers automatically – so for example these could include utilities, banks, telecoms and ISP’s.