How are businesses dealing with privacy complaints under GDPR? As the deadline approached last year, companies scrambled to update their data protection practices. Following a long period of adjustment, however, GDPR requirements have become normalized into existing compliance programs. What many companies were ill prepared for was the onslaught of consumers exercising their rights under the new regime. Under GDPR, a consumer can file a Subject Access Request (SAR) with an organization to determine if that organization is processing personal data concerning him or her, and, if the information has been shared, along with the names of the parties with which it has been shared. Additional information on SAR is discussed here.
