Data Subject Request (DSR)

The General Data Protection Regulation (GDPR) improves the rights and freedoms of data subjects to give them complete control over their personal data. In addition to the existing rights of access, erasure, and rectification, the GDPR creates new rights, such as the right to portability, the right to object to profiling, and the right to restrict processing.

Therefore, Each company should recognize and respect data subjects’ rights when personal data are processed.

The purpose is to give consumers/prospects/customers more control over their personal data. Through the Data Protection Officer (DPO), companies must be able to respond appropriately to requests within the time required when data has been collected or more globally processed to avoid complaints and/or sanctions from the CNIL, especially when sensitive data is involved.

A few years ago, the subject was yet to be a priority, but the situation has changed. Companies must organise their projects to meet the needs of this task, which is becoming increasingly crucial as customers are now aware of what is being done with their data.

Or providing specific information when the number of requests is increasing requires particular attention and time.

In this context, you should be able to manage multiple requests and give precise information (identity of the data controller, DPO, data processor, or whether data is being transferred or collected and for what purposes…) to the requesters as well as respond – as far as reasonable – to their requests.

Find out how Data Legal Drive allows you to manage and respond to data subjects’ requests.