GDPR doesn’t just limit the rights of companies. It empowers consumers to hold greater leverage against the companies that collect and use their personal data.
Once implemented in May 2018, GDPR will enable EU citizens to request explanations from companies about the personal data they have, the uses they intend for it, how long they plan to keep it and more.
Experts suggest that companies will likely face 30-day deadlines to comply with such requests and if they want to file an extension, they should be prepared to demonstrate very convincing reasons for needing more time.
What’s unclear is how consumers will react to this newfound power. Will they bombard companies with requests, questions and objections? Or largely ignore their right to know out of indifference or trust in the companies that serve them?
Regardless, any company communicating with EU citizens must be prepared to answer right to know requests accurately and in a timely fashion.