4 ms·
A subject (a person) can make a request for subject data (data about the person) that a company has stored. The data has to be about the person and associatabl
by dodobirdlord 6y ago
A subject (a person) can make a request for subject data (data about the person) that a company has stored. The data has to be about the person and associatable with the person to be covered by GDPR. If I keep track of say, average CPU time for handling requests from a particular IP address, the CPU metric doesn’t become the personal data of the individual that is associated with the IP address.