# Right of access by the data subject — GDPR — context bundle > Focused context for a single provision, curated from overview.legal on 2026-07-13. Canonical page: https://overview.legal/laws/gdpr/art-15 > Every item cites its source. Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it. ## Provision ### Right of access by the data subject — Right of access by the data subject *GDPR, gdpr-art-15-en — https://overview.legal/laws/gdpr/art-15* 1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. 2. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer. 3. The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form. 4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others. ## Enforcement 273 decision(s) on record cite Article 15, totalling approximately €82,057,279 in fines (median €10,000). Top fines: - **Clearview Al Inc.: Insufficient fulfilment of data subjects rights** (FRANCE, €20,000,000) — https://overview.legal/posts/47563 - **Vodafone Italia S.p.A.: Non-compliance with general data processing principles** (ITALY, €12,251,601) — https://overview.legal/posts/46553 - **Clearview Al Inc.: Non-compliance with general data processing principles** (UNITED KINGDOM, €9,000,000) — https://overview.legal/posts/47305 - **TIM S.p.A.: Insufficient legal basis for data processing** (ITALY, €7,631,175) — https://overview.legal/posts/47986 - **Hera Comm S.p.A.: Non-compliance with general data processing principles** (ITALY, €5,000,000) — https://overview.legal/posts/48650 ## Guidance ### EDPB-werkprogramma: vier pijlers met plannen voor richtsnoeren over AI, anonimisering en *EDPB — https://overview.legal/posts/53737* Het werkprogramma is opgebouwd rond vier pijlers: Pijler I: richt zich op harmonisatie en compliance: praktische guidance, templates (voor o.a. DPIA's, dataleknotificaties, privacy notices) en specifieke ondersteuning voor het mkb. Pijler II: draait om handhaving en samenwerking tussen toezichtho... ### Besluit mandaat, volmacht en machtiging Autoriteit Persoonsgegevens *AP — https://overview.legal/posts/53757* Besluit mandaat, volmacht en machtiging Autoriteit Persoonsgegevens ### Verkennend onderzoek misbruik van persoonsgegevens door gemeenteambtenaren *AP — https://overview.legal/posts/53761* Verkennend onderzoek misbruik van persoonsgegevens door gemeenteambtenaren ### Privacybeleid Autoriteit Persoonsgegevens *AP — https://overview.legal/posts/53762* Privacybeleid Autoriteit Persoonsgegevens ### AP-brief aan ministerie van Financiën over onderzoek naar LOA's en RTV's bij *AP — https://overview.legal/posts/53795* “Afschrift van de brief van de Autoriteit Persoonsgegevens (AP) aan het ministerie van Financiën over het onderzoek naar lokaal ontwikkelde applicaties (LOA's) en robuuste tijdelijke voorziening (RTV's) bij de Belastingdienst. Het onderzoeksrapport 'Lokaal ontwikkelde applicaties bij de Belasting... ## Related topics - **Right of Access** — https://overview.legal/topics/inzagerecht ## Legal Framework - **Personal Data** — https://overview.legal/topics/persoonsgegevens ## Legal Framework - **Right of Access Procedures** — https://overview.legal/topics/article-15-gdpr-access-procedures ## Legal Framework --- Generated by overview.legal · https://overview.legal/laws/gdpr/art-15 · 2026-07-13