Description
Under Article 15(3), a Data Subject has certain rights to request access to their personal data. It states:
“The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.”
This policy sets out the businesses’ terms around data governance and provides the framework for GDPR compliant activities and will form a fundamental part in preparing for audit and for managing data subject access requests.
Read our GDPR blog post to learn more and download our FREE GDPR Awareness Q&A Fact Sheet.