@romanervcom Please see our latest release!
We have updated the Data Subjects request by email feature to now only send an email to users who you do have data stored for. Otherwise, a message will display on screen that no user/data found and no email will be sent.
The Privacy Tools page where someone can request information for an email addresses can be used maliciously and data can be spammed – emails that don’t exist or aren’t registered on a site.
For example, a spammer could enter a large number of emails into this form and it would send many emails to people who did not request their data or emails that don’t exist.
The latest update now displays a message on the screen saying that a user will receive a message only if their data is being processed on the website. Otherwise, it will let them know that no data for the supplied email is being processed and no email is sent.
previously it also sent data to users who were not registered on the site, but who had sent an email via the contact form. Now this does not happen, if I am not registered but I have sent an email accepting the privacy consent, I do not receive my data, could there be problems with the GDPR?
this is a problem, the site must memorize the consents when an email is sent, but I who sent an email and I am a visitor to the site cannot request my data and I cannot view the consent I have given, Secondol my opinion this does not comply with the new GDPR privacy legislation
I sent an email but when I request my data the answer is:
“The email you entered is not associated with any user on this site.”
Thank you for notifying us of this problem. It will be fixed in a future update.
- You must be logged in to reply to this topic.