In the context of the new GDPR, the rights of those affected, i.e. primarily natural persons, have been significantly strengthened. According to Article 15, data subjects have the possibility of requesting comprehensive information about their data and their processing purposes from the persons responsible, i.e. from companies, authorities or other institutions.
Finding all data in a complex system landscape is usually very time-consuming and can quickly overstrain your own capacities with an increased number of requests. Finally, a processing period of 4 weeks from receipt of the request for information must be observed from 25th Mail 2018.