The hidden cost of GDPR data access requests

UK businesses are spending £1.59 million and 24 person-years annually on processing data subject access requests in compliance with Article 15 of GDPR, according to a new study commissioned by privacy specialist Guardum. Data Subject Access Requests (DSARs) require data controllers to provide data subjects with a copy of their personal data within 30 days, or risk a fine of €20 million or four percent of turnover. The study, conducted by Sapio Research among 100 data protection officers DPOs from companies with 250 or more employees, also highlights the challenges of maintaining compliance during lockdown. 75 percent of DPOs polled… [Continue Reading]