With the final approval of the EU-U.S. Data Privacy Framework, data can once again flow across the Atlantic. Learn more about the new rules at TrueVault.
Article 15.3 of GDPR states that the first copy of a data subject access request (DSAR) should be provided to the data subject free of charge. However, if the data subject requests subsequent copies of a DSAR, your company can charge a reasonable fee. This fee should be based on the administrative costs of complying with the request.
If the data subject complains to the supervisory authority about being charged for a DSAR (which is within the rights of a data subject) then the burden is on your company to prove that the fee assessment was fair. Learn more about what GDPR says about data subject access requests (DSARs) here and download our GDPR Guide to learn more.
Disclaimer: This content is provided for general informational purposes only and does not constitute legal or other professional advice. Without limiting the foregoing, the content may not reflect recent developments in the law, may not be complete, and may not be accurate or relevant in an applicable jurisdiction. This content is not a substitute for obtaining legal advice from a qualified licensed attorney in the applicable jurisdiction. The content is general in nature and may not pertain to specific circumstances, so it should not be used to act or refrain from acting based on it without first obtaining advice from professional counsel qualified in the applicable subject matter and jurisdictions.
Get monthly updates on the latest updates on policy & the shifting privacy landscape.
Dive into a world of knowledge, trends, and industry updates on the TrueVault blog.