GDPR Article 15 — Right of access by the data subject
Enforced by: ICO (UK) / National DPAs
Current as of May 25, 2018
Plain Language Summary
Individuals can request a copy of all personal data you hold about them. First copy must be free. 1 month to respond (extendable to 3 months for complex requests).
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data.
The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Responses must be provided within one month of receipt of the request.