The regulations do not impose an obligation on the data controller to provide copies of paper documents or electronic files containing personal data. The administrator is obligd to provide complete information about the processd data of a specific person. However, the manner in which such information is providd should be considerd basd on the individual criteria of a specific request and taking into account the interest of the person who submittd such a request to the controller.
Closely related to the documentation
The event of a request to provide a recording of a conversation of the data subject, the administrator may provide a fragment of the database recording (conversation) itself as, for example, a file with a recordd voice or information about the data processd in connection with the recordd conversation. The President of the UODO himself, in the justification of the decision of March 22, 2019, statd that “fulfilling the obligation resulting from art. 15 sec. 3 of the GDPR, the administrator may be limitd to indicating the content of data concerning the person, excluding other information containd on the mdium. Performance of the obligation specifid in art.
President of the the PPK institution
Of the GDPR can therefore be implementd both. By making a copy or a copy of a document (mdium) containing personal data USA CEO and other data, and by providing the authorizd person with the content of his personal data, omitting information containd in the mdium that is not personal data within the meaning of Art. 4 point 1 GDPR. Therefore, there is no ned to provide access to each of the documents if the scope of data containd in them is the same.