Hacker News Reader

Comment by donogh | Hacker News Reader

It does not have to be machine readable. GDPR is technologically neutral. If the medium of storage is paper, a data subject access request can be fulfilled on paper. For example, photocopy the page, redact the other names, and mail the copy to the data subject.

If the data subject access request is sent by email, you can take it a step further and scan and email that page. Still, it does not have to be machine readable.

View on HN

Can you point me to the text in the GDPR says what you are saying? IANAL and there's a good chance I'm just misreading the GDPR, but doesn't Article 20[0] completely disagree with you? In addition, imagine the person with the guest list lost the password to their email after putting you on their guest list, and now you don't have their new email address to ask them for the data

[0] https://gdpr-info.eu/art-20-gdpr/

That's the right to data portability, which is your right to have your data with an electronic service transferred to another service in a machine readable format.

It has nothing to do with data subject access requests, which is encoded in Article 15: https://gdpr-info.eu/art-15-gdpr/

"Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form."

That does not mean machine readable.

1(b) of article 20 clarifies that it had to be machine readable where:

the processing is carried out by automated means.

Reply on news.ycombinator.com