Compliance Risks for EU Controllers - The DPF Disproportionate Burden-Expense Exception and its Effects on EU Controllers’ Duty to Provide a Copy of Personal Data via U.S. Processors
The Disproportionate Burden-Expense Exception within the EU-U.S. Data Privacy Framework is allowing certified organisations to refuse access requests based on organisational cost or burden. The thesis is examining how this exception affects the ability of EU controllers to fulfil their obligation under Article 15(3) GDPR, when employing a U.S. processor. To answer this question, the thesis is exam
