The privacy organization noyb analyzed 121 access requests sent to companies since 2018. The result was disheartening – only 16.5 percent received a complete response. 53.7 percent received an incomplete response, and nearly 30 percent received no response at all.
The right of access In GDPR Article 15 is the most used right under the regulation. It allows you to find out what a company knows about you, and is often a prerequisite for discovering errors or illegal processing. Nevertheless, the analysis shows that most companies fail to answer requests correctly.
At the same time, a noyb survey among data protection officers showed that over 70 percent believe that access requests do not create a significant workload — and that the right is a useful tool for protecting data subjects' rights.
**Practical point:**
Test your insight routine — send a request to yourselves as if you were a customer or employee. Do you get a response within 30 days? Is the response complete — with all data, purpose, recipients, and storage time? If not, create a simple checklist and practice it.
Inspired by: noyb