Technical Consequences of the Data Subject's Rights #bbuzz
summary
GDPR reintroduces enforceable data subject rights that create concrete engineering work: one‑month reply deadlines, identity verification flows, deletion that often means deleting keys rather than destroying copies, and portals for subject access and portability. Real numbers: regulators see hundreds–thousands of complaints (Dutch 170 first week, Ireland ~1,300, Spain ~10,000) and one vendor reports 3,000 requests with only a 12% resolution rate. Practical fixes include DPIAs, purpose classification, consent rails, lineage and master‑data governance.
AI-written summary · about
chapters (8)
- 0:00Introduction and personal background
- 5:28GDPR origins and European values
- 14:05GDPR obligations in data ecosystem
- 23:15Data subject rights overview
- 35:53Restriction of processing and profiling
- 41:37Automated decision-making rights
- 47:07Accountability and purpose classification
- 52:22Q&A on compliance and systems
related talks
19mData subject rights
48mThe impact of the GDPR
50mPrivacy & Smart Regulation
26mData Protection Update and Tales from the Introduction of the GDPR
49mPractical privacy: GDPR explained
40mHow will the new EU data protection laws affect your work?
40mGDPR in Practice – What's Hot, What's Not
19mData etiquette in a regulated world