An organization receives a request multiple times from a data subject seeking to exercise his rights with respect to his own personal data. Under what condition can the organization charge the data subject a fee for processing the request?
A.
Only where the organization can show that it is reasonable to do so because more than one request was made.
B.
Only to the extent this is allowed under the restrictions on data subjects’ rights introduced under Art 23 of GDPR.
C.
Only where the administrative costs of taking the action requested exceeds a certain threshold.
D.
Only if the organization can demonstrate that the request is clearly excessive or misguided.
D. Only if the organization can demonstrate that the request is clearly excessive or misguided.
Under the GDPR, organizations can charge a reasonable fee for processing requests from data subjects if the requests are manifestly unfounded or excessive, particularly if they are repetitive. This allows the organization to cover the administrative costs of complying with such requests.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Ssourav
3 months, 3 weeks ago