4 ms·
The GDPR gives you one month to reply to such requests by default, except if the nature of the request is so complex that you can believably justify why you'd n
by ThePhysicist 9y ago
The GDPR gives you one month to reply to such requests by default, except if the nature of the request is so complex that you can believably justify why you'd need more time to reply to it. In general, I would recommend implementing automated procedures for answering such requests.
- geocar 9y agoHow many of these requests do you expect? I imagine most companies might only deal with this once or perhaps twice ever, and if they do not keep very much personal data then automating it would not be very efficient use of their time. That's why in general I'd wait until you get such a request, ask your lawyer to explain it (will probably only cost a few hundred pounds), then decide what to do next. Only very large companies (or companies that deal with a lot of personal data) will benefit from up-front automation.
- tobr 9y agoSince the content of the request is very generic and applies to almost any individual and business, it's not unthinkable that it will be automated on the other end, so anyone can push a button and send the request to hundreds of companies of their choosing. I certainly have several businesses in mind that I plan to send requests to once GDPR is in place. EDIT: Although I suppose small, non-EU businesses that mostly do not deal with personal data are unlikely to receive any requests. So you are probably right that "most companies" are unlikely receive GDPR requests.
- kuschku 9y agoIt’s already been automated. https://selbstauskunft.net/ https://selbstauskunft.net/ exists to allow you to send a BDSG §34 request (like GDPR request, but under the older German law for it) to basically any company. You select the company, sign it, and they automate all other steps. I’ve sent dozens just this week.
- Jdam 9y agoDo you actually read the dozens of responses? Or are you just doing it to annoy people?
- gsich 9y agoWhy do you think otherwise?
- qznc 9y agoI intend to use it as well. Since I'm about to move, I wait until I have the new address. Yes, I'm interested what I will get in return. I also consider it activism to keep companies aware of their responsibilities.
- briandear 9y ago..and drive up the cost of goods and services. Does anyone actually understand that this law will make things cost more?
- gsich 9y agoMaybe. But it's worth it.
- lagadu 9y agoKeeping my data private has costs associated with it? What a shocker! Do you also argument against mandatory seatbelts? All they do is drive the cost of cars up. The justice system that works to enforce the laws brings the taxes up should we get rid of it too?
- mercer 9y agoThis guy being the equivalent of a car manufacturer in your analogy...
- madez 9y agoYes, I read the responses and take action upon them. The last time I quit my bank account to move to a different bank. Also, I'd recommend sending another request some time after quiting your contract with the company, just to make sure they give you a written guarantee that they deleted all data about you they don't _seriously have to_ maintain.
- benologist 9y agoI think if you can easily automate it this is the time to because it will make everything easier as privacy rights continue their spread to additional countries and on to the UN's charter on human rights. Granting the rest of your users the same rights before they officially have them seems the right thing to do because it does not seem ethical to only uphold some of your users privacy.