# Transparent information, communication and modalities for the exercise of the rights of the data subject 12(3) — GDPR — provision context

> Focused context for a single provision (12(3)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-12#par-3
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Transparent information, communication and modalities for the exercise of the rights of the data subject** (GDPR, full article: https://overview.legal/laws/gdpr/art-12).

## Provision text

### 12(3)

The controller shall provide information on action taken on a request under Articles 15 to 22 to the data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. The controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request by electronic form means, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject.


## Topics on this provision

- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Judgment of the General Court (Fourth Chamber) of 20 July 2016 (Extracts).#Athanassios Oikonomopoulos v European Commission.#Non-contractual liability — Damage caused by the Commission in the context of an OLAF investigation and by OLAF — Actions for damages — Action for a declaration that certain measures taken by OLAF were void and inadmissible for evidentiary purposes before the national authorities — Admissibility — Misuse of powers — Processing of personal data — Rights of the defence.#Case** (case-law) — https://overview.legal/posts/132355
- **BVwG - W252 2247042-1** (case-law) — https://overview.legal/posts/132104
- **Judgment of the Court (Fourth Chamber) of 27 October 2022.#Proximus NV v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Processing of personal data and protection of privacy in the electronic communications sector – Directive 2002/58/EC – Article 12 – Public telephone directories and directory enquiry services – Subscriber’s consent – Obligations of the provider of directories and of directory enquiry serv** (case-law) — https://overview.legal/posts/132304
- **Judgment of the Court (Second Chamber) of 15 March 2017.#Tele2 (Netherlands) BV and Others v Autoriteit Consument en Markt (ACM).#Request for a preliminary ruling from the College van Beroep voor het Bedrijfsleven.#Reference for a preliminary ruling — Electronic communications networks and services — Directive 2002/22/EC — Article 25(2) — Directory enquiry services and directories — Directive 2002/58/EC — Article 12 — Directories of subscribers — Making available personal data concerning subscri** (case-law) — https://overview.legal/posts/132349
- **Judgment of the General Court (Sixth Chamber) of 3 December 2015.#CN v European Parliament.#Non-contractual liability — Petition addressed to the Parliament — Dissemination of certain personal data on the Parliament’s website — Absence of a sufficiently serious breach of a rule of law conferring rights on individuals.#Case T-343/13.** (case-law) — https://overview.legal/posts/132357
- **OLG München - 36 U 1054/25 e** (case-law) — https://overview.legal/posts/184545
- **Österreichische Datenschutzbehörde v CRIF** (case-law) — https://overview.legal/posts/51486
- **Judgment of the Court (First Chamber) of 26 September 2024.#TR v Land Hessen.#Request for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 57(1)(a) and (f) – Tasks of the supervisory authority – Article 58(2) – Corrective powers – Administrative fine – Discretion of the supervisory authority – Limits.#Case C-768/21.** (case-law) — https://overview.legal/posts/132245
- **VG München - M 26a K 25.5210** (case-law) — https://overview.legal/posts/108991
- **Judgment of the Court (Grand Chamber) of 21 June 2022.#Ligue des droits humains ASBL v Conseil des ministres.#Request for a preliminary ruling from the Cour constitutionnelle.#Reference for a preliminary ruling – Processing of personal data – Passenger Name Record (PNR) data – Regulation (EU) 2016/679 – Article 2(2)(d) – Scope – Directive (EU) 2016/681 – Use of PNR data of air passengers of flights operated between the European Union and third countries – Power to include data of air passengers** (case-law) — https://overview.legal/posts/132311
- **BVwG - W291 2298748-1** (case-law) — https://overview.legal/posts/49235
- **Judgment of the General Court (Sixth Chamber) of 3 December 2015.#CN v European Parliament.#Non-contractual liability — Petition addressed to the Parliament — Dissemination of certain personal data on the Parliament’s website — Absence of a sufficiently serious breach of a rule of law conferring rights on individuals.#Case T-343/13.** ¶100 (case-law, General Court) — https://overview.legal/posts/132357

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-12#par-3 · 2026-08-22