alt Hacker NewsPeople signing up for newsletters (which this site has) then immediately submitting a SAR was an unsolved issue until ECJ finally ruled against it last month [0]. I think you're missing a few steps there. It would be nice if we lived in a world where legal compliance automatically conferred legal immunity.
[0] https://www.heise.de/en/news/GDPR-ECJ-curbs-systematic-abuse...
Replies
> which this site has
It’s not clear to me which site “this” refers too.
> I think you're missing a few steps there.
I mean, yeah, I thought the format of the reply made it clear it was a joke. The larger point is that compliance isn’t that complicated and only becomes hard if you are invasive. When you’re not invasive it’s actually fairly simple.
> It would be nice if we lived in a world where legal compliance automatically conferred legal immunity.
It probably wouldn’t, because that would mean anyone violating the spirit of a law would be exempt from consequences by adhering to its letter.
A subject access request if you just have a mailing list sign-up would require you to provide the information in that mailing-list sign-up and information of how you have processed it. Nothing more, unless you in fact also store other information on a user behind their back.
So, no, it was not an unsolved issue: Just respond. The court case resolved the situation where a company didn't respond, but the request was potentially abusive. Nothing that and legitimate requests are both solved by simply responding.