Created with AI.
What do we need to do when a customer requests access to their own data?
The right of access is established by the General Data Protection Regulation. The customer may ask to know what information you hold about them.
It can be extended by two months for complex requests, but you must notify the requester within the first month. The time limit runs from when the request was received, not from when you started working on it.
Customer data can be found in CRM systems, emails, spreadsheets, and support systems. Without an overview of where personal data is processed, every request becomes a small project.
A raw data export containing field names and GUIDs does not meet the requirement. The information must be presented in a way that the recipient can understand.
Establish a standard procedure with a checklist of systems. Then the next request will take hours rather than days.
Ask a question or share what helped you.
Share a question or reflection.
Be the first to contribute.