Response to EDPB consultation on draft guidelines on data subject rights of access

<?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.loc.gov/MARC21/slim http://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd">
  <record>
    <leader>00000cam a22000004b 4500</leader>
    <controlfield tag="001">MAP20220009003</controlfield>
    <controlfield tag="003">MAP</controlfield>
    <controlfield tag="005">20220902103306.0</controlfield>
    <controlfield tag="008">220317s2022    bel||||       ||| ||eng d</controlfield>
    <datafield tag="040" ind1=" " ind2=" ">
      <subfield code="a">MAP</subfield>
      <subfield code="b">spa</subfield>
      <subfield code="d">MAP</subfield>
    </datafield>
    <datafield tag="084" ind1=" " ind2=" ">
      <subfield code="a">131.2</subfield>
    </datafield>
    <datafield tag="245" ind1="1" ind2="0">
      <subfield code="a">Response to EDPB consultation on draft guidelines on data subject rights of access</subfield>
    </datafield>
    <datafield tag="260" ind1=" " ind2=" ">
      <subfield code="a">Brussels</subfield>
      <subfield code="b">Insurance Europe</subfield>
      <subfield code="c">2022</subfield>
    </datafield>
    <datafield tag="300" ind1=" " ind2=" ">
      <subfield code="a">6 p.</subfield>
    </datafield>
    <datafield tag="520" ind1=" " ind2=" ">
      <subfield code="a">Insurance Europe welcomes the opportunity to comment on the European Data Protection Board's (EDPB) draft guidelines on the right of access under the General Data Protection Regulation (GDPR). Insurance Europe welcomes the draft guidelines as they provide clarity on how to handle practical cases of data access requests and the obligations that must be adhered to. Insurance Europe is, however, concerned that, in certain cases, the guidelines' interpretation of the right of access would result in a more burdensome handling of data access requests without any clear benefits for the data subjects. For example, responding to a broad access request by providing all the personal data and processing activities around an individual in one go would risk overloading the data subject with information that is less usable or understandable. Controllers should therefore be able to reliably respond to these requests as needed by providing information in different layers and to facilitate the data subject's understanding of the data. Insurance Europe therefore invites the EDPB to provide the necessary clarifications on the issues described below.</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2="4">
      <subfield code="0">MAPA20080626075</subfield>
      <subfield code="a">Protección de datos personales</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2="4">
      <subfield code="0">MAPA20180004278</subfield>
      <subfield code="a">Reglamento General de Protección de Datos</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2="4">
      <subfield code="0">MAPA20080627775</subfield>
      <subfield code="a">Transferencia de la información</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2="4">
      <subfield code="0">MAPA20080586294</subfield>
      <subfield code="a">Mercado de seguros</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2=" ">
      <subfield code="0">MAPA20080592875</subfield>
      <subfield code="a">Protección de datos</subfield>
    </datafield>
    <datafield tag="651" ind1=" " ind2="1">
      <subfield code="0">MAPA20080640255</subfield>
      <subfield code="a">Unión Europea</subfield>
    </datafield>
    <datafield tag="710" ind1="2" ind2=" ">
      <subfield code="0">MAPA20120012608</subfield>
      <subfield code="a">Insurance Europe</subfield>
    </datafield>
    <datafield tag="710" ind1="2" ind2=" ">
      <subfield code="0">MAPA20220002943</subfield>
      <subfield code="a">European Data Protection Board's </subfield>
    </datafield>
  </record>
</collection>