
Right to information under data protection law - what does that mean for companies?
Lecture in the series: Lawyer meets IT
What does the right to information mean, which copies of personal data must be transmitted, what must companies prepare?
Topic
Data protection / GDPRGovernance, Riskmanagement and ComplianceLegislation, standards, regulations
When & Where
Details
Format:
it-sa insights
Session description
With the EU Data Protection Regulation, the right of access was also newly regulated. In particular, the right to receive copies of the personal data processed by the controller was introduced. Especially in the case of long-term relationships, for example with employees or customers, this can cause considerable effort. The request must be processed within one month, at the latest within 3 months. It must be checked which copies will be issued and how the rights and interests of the data controller (business secrets, know-how, etc.) and other persons will be protected. Companies must prepare for requests for information and set up appropriate business processes.