O'Reilly logo

EU General Data Protection Regulation (GDPR): An Implementation and Compliance Guide by IT Governance Privacy Team

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

CHAPTER 11: SUBJECT ACCESS REQUESTS

As we’ve already seen, a data subject has the right to request the personal information held about them by a data controller. These requests are known as subject access requests, and the GDPR states that they enable the data subject “to be aware of, and verify, the lawfulness of the processing”176.

In making a subject access request, an individual is exercising their right to obtain confirmation that their data is being processed by the data controller, and to have access to that personal data and any other supplementary information to help explain the data revealed to that individual.

The right to access personal information under the Regulation is very similar to that granted by the Data Protection Directive ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required