Video & phone requests

Answer:

All client requests need to be assessed on a case by case basis. The time frame for responding to data subject access requests (DSARs) should not exceed 30 days from the date that the request has been received.

Note that the data subject can only request access to personal data concerning him/her and therefore you are not allowed for example to provide video footage that shows other persons than the one asking for the data. If technically possible, in this particular case the faces of the other individuals in the footage need to be blurred as not to allow other persons to be identified.

If another person than the data subject asks for such data you can only provide it in situation when there is a legal justification behind it such as a subpoena.

To learn more about DSAR s check out our webinar " Data Subject Rights under the EU GDPR" (https://advisera.com/eugdpracademy/webinar/data-subject-rights-under-the-eu-gdpr-free-webinar-on-demand/).