4 ms·

Is there amy regulation about how the data has to be formatted? Say I send a json string like "this is LITERALLY the data we use", but the avergae Joe is left i

Is there amy regulation about how the data has to be formatted? Say I send a json string like "this is LITERALLY the data we use", but the avergae Joe is left irritated and annoyed, am I in trouble?

jacquesm 8y ago
JSON or XML would be an excellent way to answer, alternatively you could format it for easier human consumption. Going out of your way to make the response useless is probably not a good idea.
- oaiey 8y ago
  As "transportability" from one service to another is a sub topic, easier consumption might hurt.
- floatingatoll 8y ago
  CSV is also a viable choice here, for the simple reason that it can be imported directly into any spreadsheet software* for inspection and filtering. * Ironically, people are using Google Drive to do this.
amelius 8y ago
You should probably also encrypt the data. This makes me wonder: what if you encrypt using a proprietary tool, and sell a decryption tool through another company? You could actually make money from GDPR requests.
- saintPirelli 8y ago
  You should have kept this to yourself. If you market this well in the B2B sector, you could set yourself up for a substantial passive income.
- danieltillett 8y ago
  Very clever.
chrisbuc 8y ago
From the ICO: (the UK regulator) How should we provide the data to individuals? If an individual makes a request electronically, you should provide the information in a commonly used electronic format, unless the individual requests otherwise. The GDPR includes a best practice recommendation that, where possible, organisations should be able to provide remote access to a secure self-service system which would provide the individual with direct access to his or her information (Recital 63). This will not be appropriate for all organisations, but there are some sectors where this may work well. However, providing remote access should not adversely affect the rights and freedoms of others – including trade secrets or intellectual property. Ref: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/ https://ico.org.uk/for-organisations/guide-to-the-general-da...
- kokey 8y ago
  I think the most 'commonly used electronic format' is binary.

Is there amy regulation about how the data has to be formatted? Say I send a json string like "this is LITERALLY the data we use", but the avergae Joe is left irritated and annoyed, am I in trouble?

jacquesm 8y ago

JSON or XML would be an excellent way to answer, alternatively you could format it for easier human consumption. Going out of your way to make the response useless is probably not a good idea.

oaiey 8y ago
As "transportability" from one service to another is a sub topic, easier consumption might hurt.
floatingatoll 8y ago
CSV is also a viable choice here, for the simple reason that it can be imported directly into any spreadsheet software* for inspection and filtering. * Ironically, people are using Google Drive to do this.

amelius 8y ago

You should probably also encrypt the data. This makes me wonder: what if you encrypt using a proprietary tool, and sell a decryption tool through another company? You could actually make money from GDPR requests.

saintPirelli 8y ago
You should have kept this to yourself. If you market this well in the B2B sector, you could set yourself up for a substantial passive income.
danieltillett 8y ago
Very clever.

chrisbuc 8y ago

From the ICO: (the UK regulator) How should we provide the data to individuals? If an individual makes a request electronically, you should provide the information in a commonly used electronic format, unless the individual requests otherwise. The GDPR includes a best practice recommendation that, where possible, organisations should be able to provide remote access to a secure self-service system which would provide the individual with direct access to his or her information (Recital 63). This will not be appropriate for all organisations, but there are some sectors where this may work well. However, providing remote access should not adversely affect the rights and freedoms of others – including trade secrets or intellectual property. Ref: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/ https://ico.org.uk/for-organisations/guide-to-the-general-da...

kokey 8y ago
I think the most 'commonly used electronic format' is binary.