July 24, 2024

Can I charge for a data subject request?

Author:

Learn more about Data Subject Requests, including timelines and acceptable fees, with our FAQS about GDPR.

table of contents

Article 15.3 of GDPR states that the first copy of a data subject access request (DSAR) should be provided to the data subject free of charge. However, if the data subject requests subsequent copies of a DSAR, your company can charge a reasonable fee. This fee should be based on the administrative costs of complying with the request.

If the data subject complains to the supervisory authority about being charged for a DSAR (which is within the rights of a data subject) then the burden is on your company to prove that the fee assessment was fair. Learn more about what GDPR says about data subject access requests (DSARs) here and download our GDPR Guide to learn more.

‍

Disclaimer: This content is provided for general informational purposes only and does not constitute legal or other professional advice. Without limiting the foregoing, the content may not reflect recent developments in the law, may not be complete, and may not be accurate or relevant in an applicable jurisdiction. This content is not a substitute for obtaining legal advice from a qualified licensed attorney in the applicable jurisdiction. The content is general in nature and may not pertain to specific circumstances, so it should not be used to act or refrain from acting based on it without first obtaining advice from professional counsel qualified in the applicable subject matter and jurisdictions.

previous chapter

next chapter

Dive into a world of knowledge, trends, and industry updates on the TrueVault blog.

July 24, 2024

Virginia Passes New Privacy Protections for Minors

Virginia has approved strong children's data privacy laws which could potentially affect a huge number businesses. Learn about the new rules here.

July 24, 2024

Key Takeaways from Ireland's GDPR Case Studies

Ireland's Data Protection Commission published a long list of case studies from its first five years of GDPR enforcement. Here is what we learned.

July 24, 2024

The EU-US Data Privacy Framework: What You Need to Know

With the final approval of the EU-U.S. Data Privacy Framework, data can once again flow across the Atlantic. Learn more about the new rules at TrueVault.

This is some text inside of a div block.

Heading

Author:

This is some text inside of a div block.

table of contents

Heading 1

Heading 2

Heading 3

Heading 4

Heading 5

Heading 6

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur.