GDPR and financial advice: Access and portability

A central tenet of the General Data Protection Regulation (GDPR) is affording individuals easy and timely access to their data. If a client requests their data, firms must provide it to them no later than one month after the request. There is scope for an extension where cases are more complex, since it may not be possible to source and submit such data within the time allotted. The individual should be notified of the delay and the delay must be reasonable - for example, the client should be notified of the delay within one month and the data provided within a maximum of a further tw...