On June 13, the Swedish data protection regulator issued Spotify a fine of 58 million SEK (approx $5.4 million USD) for failures in its data subject rights process. In particular, violations of Article 15 and Article 12(1) of the GDPR. What is the legal significance of the case? What did the court have to say about Spotfy's "multi-channel" approach; and the cost of preparing local language translation? What does it mean for businesses receiving data subject access requests?  In our latest Bitesize Legal Update, Fieldfisher's Megan Ward and James Russell cut right to the chase, and discuss the key takeaways for businesses wanting to understand what the decision means for them.