Many controllers reacted to GDPR with automated systems. While this may be effective and helpful in many cases, there is a tendency that controllers limit the options of data subjects to express their rights to certain „requests“ – that may not always be in the interest of the data subject. Many forms of automated requests are also extremely complicated or not useable in practice.