The most effective manner to exercise your access rights. Basically, it is a request sent to a data controller where the individual asks for a copy of their personal data and/or information about the processing of their personal data, for example, any third parties their personal data has been disclosed to, data transfers to third countries etc.
PI presents here 5 profiles of companies involved in political campaigning in order to provide a snapshot of how the digital political campaign sector works and further highlight the opacity and concerns for privacy.
Here are a few suggested tips, based on our own experience with Data Subject Access Requests (DSARs). This is based on DSARs under the EU General Data Protection Regulation (GDPR), but we hope our tips may be useful in other jurisdictions too.