An organization receives a request multiple times from a data subject seeking to exercise his...

[Reference: https://gdpr-info.eu/art-23-gdpr/, According to the GDPR, data subjects have the right to access, rectify, erase, restrict, port and object to the processing of their personal data. These rights are not absolute and may be subject to limitations and conditions. One of these conditions is that the controller may charge a reasonable fee for the administrative costs of complying with the request if it is manifestly unfounded or excessive, in particular because of its repetitive character (Art 12(5) of GDPR). The controller has the burden of proving the manifestly unfounded or excessive character of the request. The fee must not exceed the actual costs incurred by the controller and must not prevent the exercise of the data subject’s rights. References:, GDPR, Art 12(5), Free CIPP/E Study Guide, p. 13, European Data Protection Law & Practice, p. 121, ]