CCC has a longstanding policy demand called the "Datenbrief" ('data letter'). Under this proposal, every corporation that keeps personal information about a nat

CCC has a longstanding policy demand called the "Datenbrief" ('data letter'). Under this proposal, every corporation that keeps personal information about a natural person would be obligated to, once a year, mail the subject a letter containing their information, with instructions how to exercise their existing statutory deletion/correction rights. If you keep PII, you'd also need to keep some contact info for the subject, and use it to ensure they know about their rights / the data. The existence of the data-related right would imply an obligation to inform the subject about it. I guess I'd prefer a web interface displaying all the data holders with little "delete" buttons, over getting a gazillion letters, but if this is implemented by a single organization that actually has all your data (even if only for the purpose of faciltating GDPR), it could be a central point of failure. [1] https://www.ccc.de/en/datenbrief https://www.ccc.de/en/datenbrief