Data Subject Right

Answer:

The controller has 30 days to respond to the data subject. However, if a processor is the one receiving a request form a data subject the processor has to notify the data controller as soon as possible and is only the controller that needs to send a reply to the data subject.

The information about how to deal with data subject request is found in the “DATA SUBJECT ACCESS REQUEST PROCEDURE” in the EU GDPR Documentation Toolkit https://advisera.com/eugdpracademy/eu-gdpr-documentation-toolkit/

To find out more about DSARs check out our webinar “Data Subject Rights under the EU GDPR” https://advisera.com/eugdpracademy/webinar/data-subject-rights-under-the-eu-gdpr-free-webinar-on-demand/