4 ms·

What? That doesn't make any sense. The regulator would only care that you sent a valid request.

jacquesm 8y ago
Boilerplate says that you don't care to even bother write a specific letter with your specific questions. Going on the assumption that the regulators will receive a large volume of complaints they will do what every overwhelmed institution does: Triage. - which requests can we get rid of immediately? - which requests are definitely legitimate? - which requests are borderline? but will need work? The boilerplate letters will - unless the boilerplate contains major errors - fall in the third category. It is my expectation that most enforcement in the first period will come from the second category, and in those cases where enough people each individually expended some effort on their complaint to the regulator.
- mlthoughts2018 8y ago
  That might be true, or you might feel that your request is entirely general in nature -- you are generally concerned about how your data is used, collected, or sold by a given company, even though, at this moment, you have no specific complaint. Maybe you heard about how a similar company in the same industry did something bad, and you just want to be cautious and check. Yes, you might modify the tone of the template for the context of that situation. But you might still use a template because you believe it gives you the best way to be sure that the request uses adequate language to constitute a properly formatted and comprehensive request (short of taking your draft request to your personal attorney and paying them for advice). Your point is not wrong, but there still might be cases when someone satisfies both (a) not basing their GDPR inquiry on a specific incident or mistreatment that they know of, only on general skepticism or due diligence to get a comprehensive understanding of how the data is used. (b) still wants to use a template to have reasonable confidence it is a well-formed and comprehensive request without needing to pay an attorney to draft it or advise them on their own draft.

Boilerplate says that you don't care to even bother write a specific letter with your specific questions. Going on the assumption that the regulators will receive a large volume of complaints they will do what every overwhelmed institution does: Triage. - which requests can we get rid of immediately? - which requests are definitely legitimate? - which requests are borderline? but will need work? The boilerplate letters will - unless the boilerplate contains major errors - fall in the third category. It is my expectation that most enforcement in the first period will come from the second category, and in those cases where enough people each individually expended some effort on their complaint to the regulator.

mlthoughts2018 8y ago
That might be true, or you might feel that your request is entirely general in nature -- you are generally concerned about how your data is used, collected, or sold by a given company, even though, at this moment, you have no specific complaint. Maybe you heard about how a similar company in the same industry did something bad, and you just want to be cautious and check. Yes, you might modify the tone of the template for the context of that situation. But you might still use a template because you believe it gives you the best way to be sure that the request uses adequate language to constitute a properly formatted and comprehensive request (short of taking your draft request to your personal attorney and paying them for advice). Your point is not wrong, but there still might be cases when someone satisfies both (a) not basing their GDPR inquiry on a specific incident or mistreatment that they know of, only on general skepticism or due diligence to get a comprehensive understanding of how the data is used. (b) still wants to use a template to have reasonable confidence it is a well-formed and comprehensive request without needing to pay an attorney to draft it or advise them on their own draft.