[LT-07]
GDPR DSAR Compliance at Scale: Processing 200 Requests Per Month Without Hiring a Team
GDPR Article 15 gives data subjects the right to receive a copy of all personal data an organization holds about them. The 30-day response deadline (extendable to 90 for complex requests) is mandatory. The fine for systemic DSAR failures is not theoretical: Vodafone Spain received a €1.2M fine in 2021 for DSAR failures. A German company received a €225K fine in 2023.
The volume of DSARs is increasing shar...