Demystifying the DSR Process: Handling Difficult Data Subject Rights Requests

No ratings

Presented at GlobalPrivacySummit 2019 by

Shahab Asghar

Roy Kamp

Barbara Sondag

Can your organization’s privacy operations pass the tests of the most challenging and nuanced data subject rights requests? Are you successfully managing the most complicated and difficult demands under the GDPR? In this interactive session, a panel of experts from various of points of view (internal counsel, DPO, outside advisory) will discuss five real-world case studies from cybersecurity, cryptocurrency, pharmaceutical, social media, and predictive intelligence organizations. We will discuss how to tackle requests covering the right of access by the data subject, right to erasure, right to restriction of processing, right to data portability, and right to object. The panel will discuss where the obligations are clear and where there is room for interpretation, the operational challenges they have seen in fulfilling these tricky requests, and what they expect to see as these rights—which are already being demanded by many U.S. residents—expand into California.What you’ll take away:Review post-mortem learnings from recent data subject rights requests in several countriesIncorporate industry best practices and tips into your privacy operations to build more mature data subject response processesUnderstand how to analyze the requests and the interplay between these requests, and an organization’s legal hold processes and litigation possibilities