4 ms·

It's alarming because you describe the letter as analogous to an "exploit toolkit" and we all know no patch is coming. Perhaps proponents of GDPR should have c

• jacquesm 8y ago
  They did consider it, there is a pretty extensive part written on what can go into a DSAR and from what I can see this letter skirts the edge and in some places goes over it but on the whole it is not an unreasonable burden to deal with it as it is. Take into account the lengths to which companies will go to collect data, it stands to reason that in that context there is some balance to be found if a Data Subject makes a request about that collected data. If you don't collect data the request can be answered immediately and without further work.