The GDPR doesnโt mandate how data requests should be made, but it does say that organizations handling personal data should be prepared to handle the requests. One would be right to wonder whether companies are as prepared as they should be.
Read more on Payment Source. (Note: subscription wall.)