How to answer a GDPR data subject request in 6 steps

So you have just received an e-mail with the title “Delete all my data!”, or “Send me everything you know about me!”. After the initial shock, you will have to soon realise, that what you are now faced with is most probably a data subject request under the framework of the new General Data Protection Regulation.

The EU’s new Regulation, which has an enormous scope of applicability and tons of new obligations for data controllers, gives the data subjects extraordinary new rights, that allow them to exercise new rights that are quite timely in today’s digital age. So let’s see what you should do when you receive such an e-mail!