Generally speaking, your company shouldn’t process restricted data in any way other than to store it. Article 20 of the GDPR gives users the right to request a copy of any of their personal data that your company possesses. The idea is that individuals should truly own their personal data.
For More Information Please Refer:
You May Also Like to Read: