Data subjects are demanding more transparency regarding the processing of their data and are willing to resort to organisations and competent authorities to exercise their rights.

Privacy defence organisations such as NOYB (a digital rights organisation) are increasingly playing a pivotal role in representing data subjects and filing hundreds of complaints before supervisory authorities.

 

Challenges:

  • The increasing public awareness on privacy rights represents heightened scrutiny for organisations coming from data subjects enquiring about how their personal data is handled. Overall compliance with organisations' obligations (especially transparency and integrity obligations) regarding the processing of personal data, and the ability to demonstrate it, is essential so that they can better defend themselves in case of an administrative offence or lawsuit.

Actions:

  • Improve response standards to data subjects and implement adequate procedures to internally escalate or have specific advice in connection with more complex or critical requests.