request and receive all the information — It's easy for your customers to request and receive all the information you have about them
People have the right to see what personal data you have about them (Article 15) and how you're using it. They also have a right to know how long you plan to store their information and the reason for keeping it that length of time. You have to send them the first copy of this information for free but can charge a reasonable fee for subsequent copies. Make sure you can verify the identity of the person requesting the data. You should be able to comply with such requests within a month.
| Property | Value |
|---|
| Section | Privacy rights |
| Owner | operator |
Mapped Controls
| Control | Title |
|---|
| SID-ARCH-02 | Operator-Scope Compliance Obligations |
Source: GDPR Checklist for Data Controllers