Data Portability

Answer:

You need to provide the data subject a copy of the information you have about him basically copies of the documents where their personal data is mentioned.

Regarding ex-employees this needs to be assessed because the emails might me subject to copyright or contain copyright protected information as well as personal data of other individuals and in this case these date need to be removed.

If you want to get more guidance about data subjects rights check put our webinar “Data Subject Rights under the EU GDPR” (https://advisera.com/eugdpracademy/webinar/data-subject-rights-under-the-eu-gdpr-free-webinar-on-demand/).