The GDPR applies as much to a startup or side business as it does to Facebook and Google.
A letter like this would be a hugely disproportionate burden to a small business like that. It would take many hours, if not days, to reply properly to all of those points, even for a business that is doing nothing shady or unusual.
You can't just write "automate it" as if that has no cost.
A letter like this would be a hugely disproportionate burden to a small business like that. It would take many hours, if not days, to reply properly to all of those points, even for a business that is doing nothing shady or unusual.
You can't just write "automate it" as if that has no cost.