An Organisation Receives a Request Multiple Times from a Data

question 14

Multiple Choice

An organisation receives a request multiple times from a data subject seeking to exercise his rights with respect to his own personal data. Under what condition can the organisation charge the data subject for processing the request?

• A) Only where the organisation can show that it is reasonable to do so because more than one request was made.
• B) Only to the extent this is allowed under the restrictions on data subjects' rights introduced under Art 23 of GDPR.
• C) Only where the administrative costs of taking the action requested exceeds a certain threshold.
• D) Only if the organisation can demonstrate that the request is clearly excessive or misguided.