How can you handle increasing volumes of data subject rights requests?
The General Data Protection Regulation (GDPR) is all about putting the individual first. Under the GDPR, individuals have rights in relation to any personal data you may be processing about them. As well as potentially triggering difficult legal problems, rights mishandling can damage trust, brand and reputation.
The eight core rights of individuals under the GDPR in relation to their personal data are:
- The right to be informed;
- The right of access;
- The right of rectification;
- The right to erasure;
- The right to restrict processing;
- The right to data portability;
- The right to object;
- The right not to be subject to automated decision making, including profiling.
Most organisations now provide an email address to which rights requests and general privacy queries can be submitted. Managing these incoming communications well can be a time- and resource-consuming activity.
Service areas
- Managing your privacy e-mailbox
- Managing data subject rights requests
Managing your privacy e-mailbox
Managing your privacy e-mailbox well can be a time- and resource-consuming activity.
Our Mailbox Service offers an ideal solution. It’s designed with both your and your customers’ needs in mind and can flex to the requirements of your organisation. We’ll put in place a dedicated team to develop an e-Mailbox Playbook with you, designed around your organisation’s special characteristics. The playbook and responsibilities of the team can include: identifying the nature of the incoming email (from complaints, to rights requests and breach notifications), prioritising urgent matters, alerting appropriate internal stakeholders, maintaining auditable records and, where necessary, escalating critical issues within the business.
We can also extend our service to manage any data subject rights requests and/or complaints which may be identified.
Managing data subject rights requests
Using state-of-the-art technological solutions and dedicated experts, we can help you put in place reliable processes for responding to data subject rights requests.
As well as meeting the legal requirements, including the tighter timescales which apply, the core of our services is designed to leave your customers, employees and the public with a positive experience of engaging with your business.
Contact us
Guy Brandenbourger
Advisory Partner, Government & Public Sector Leader, Healthcare Leader, PwC Luxembourg
Tel: +352 49 48 48 2386
