How can companies handle subject access requests under the GDPR?

Under the General Data Protection Regulation (GDPR), companies in New Hampshire must respond to requests from individuals about the data they have collected and stored in a timely manner. These requests are known as subject access requests. When a subject access request is sent to a company, the company is obligated to provide the individual with certain information about the data it holds. This includes information about the type of data collected, who the data was shared with, and the purpose of gathering the data. Companies must respond to subject access requests within one month of receiving them. This response should provide the individual who requested the information with a copy of the requested personal data, free of charge. Additionally, companies must inform individuals of their right to have their data rectified, blocked, or erased. This includes providing individuals with the means to securely delete their personal data if requested. Companies must also be aware of the rules around transferring data outside of the European Union. Finally, companies should keep records of all subject access requests they receive, including the dates of the requests and how they were handled. This will help ensure that any requests are addressed in a timely and appropriate manner.

Related FAQs

What rights do consumers have under PIPEDA?
What data is protected under the CCPA?
What are the implications of facial recognition technology for privacy law?
How can businesses handle customer requests for data access and rectification?
What is the role of data breach notification in privacy law compliance?
What are the requirements of HIPAA?
How can companies protect customer data when using IoT devices?
How can companies protect customer data when outsourcing services?
How can businesses create policies to protect their customers' personal data?
What are the obligations of companies when collecting customer data?

How can companies handle subject access requests under the GDPR?

Related FAQs

Related Blog Posts