Search


	Podcast:		voiceofthedba's podcast
	Episode:		The Nightmare Letter
	Category:		Technology
	Duration:		00:03:15
	Publish Date:		2018-03-27 20:00:00
	Description:		I'm not sure if this imaginary GDPR letter is a nightmare, but I do know that in most of the organizations where I've worked, this type of request would result in a crash project for me. I'd be working long hours, contacting lots of people and trying to manage a complex spreadsheet of information about an individual. I'd like to think that I'd compile this information in a general sense to understand our data better and anticipate future requests, building a process that I could repeat, but I know that under pressure that might not always happen. I'm sure I'd grab some data without capturing and saving the metadata or query. I'd probably have to perform duplicate work when the next request came in. GDPR enforcement begins in a couple months, and organizations receiving this type of letter will have 30 days to respond. Companies can also charge a reasonable fee based on administrative costs for information requested. The fee that's reasonable for getting a few of these letters a month might not be sufficient if hundreds or thousands of individuals start requesting this information, and I'm sure companies and authorities will be arguing about the rates. Read the rest of The Nightmare Letter
	Total Play:		0