CHAPTER 11: SUBJECT ACCESS REQUESTS
As we’ve already seen, a data subject has the right to request the personal information held about them by a data controller. These requests are known as subject access requests, and the GDPR states that they enable the data subject “to be aware of, and verify, the lawfulness of the processing”176.
In making a subject access request, an individual is exercising their right to obtain confirmation that their data is being processed by the data controller, and to have access to that personal data and any other supplementary information to help explain the data revealed to that individual.
The right to access personal information under the Regulation is very similar to that granted by the Data Protection Directive ...
Get EU General Data Protection Regulation (GDPR): An Implementation and Compliance Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
