Yes, that is how I would respond to a request inquiring as to what my GDPR practices are.
The requestor here isn't asking for access their information for GDPR reasons. They are asking what my private business operations are, which are not part of what I'm required to disclose, so far as my understanding goes.
Separate from the above, if I run a US based business, why would I care if the EU wanted to try and sue me for breaking a law that has no jurisdiction over me?
The requestor here isn't asking for access their information for GDPR reasons. They are asking what my private business operations are, which are not part of what I'm required to disclose, so far as my understanding goes.
Separate from the above, if I run a US based business, why would I care if the EU wanted to try and sue me for breaking a law that has no jurisdiction over me?