A data subject has the right to access their personally identifiable information (PII) data and have it updated.
You should automate updates, letting the data subject update personal data from your website. You should also be able to process a subject access request (SAR) if the data subject emails or calls you for his or her PII data.
The data subject has the right to receive their PII data in some data format that lets them move their data from one data controller to another; called the right to data portability. GDPR does not state what format this has to be in, but generally try to keep it simple and in some widely-used format, such as comma-separated values (CSV).
Last updated: Jun 19, 2018