Subject Access Requests: watchouts and changes

In recent months the European Data Protection Board (the umbrella organisation which brings together the national data protection authorities) adopted a final version of a Guideline on data subject requests - Right of access. Among others, the Guideline provides clarifications on the scope of the right of access, the information the controller has to provide to the data subject, the format of the access request, the main modalities for providing access, and the notion of manifestly unfounded or excessive requests.