The Art 15 GDPR right to access is pretty absolute. There are only three grounds under which access to a copy of your data can be denied:
Art 12(5): the request is “manifestly unfounded”, e.g. clearly just submitted for trolling
Art 12(5): the request is “excessive”, e.g. if you repeat the same request very frequently
Art 15(4): access to a copy would “...
What does your Data Protection Officer say?
It’s their role to be aware of and assess if you policies, procedures and processes comply with the principles. For the particular application is it:
“specified, explicit and legitimate purposes”?
“adequate, relevant and limited to what is necessary”
“kept in a form which permits identification of data subjects ...
Rewind and reset please: What is your valid legal basis for collecting the personal data?
Let's look at this site as an example.
There is personal information (PI) in this answer. The words that I post are linked to my account. My account is directly tied to me. It contains an id no, a pseudonym, a list of IP addresses that I have used (as a Mod, I can see ...