GDPR Recital 57 EN
LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this law. Contains: the full text of every article, recital and provision of this law. Everything links back to its source on overview.legal — legal information, not advice.

Recital 57 — data subject identification obligations

Personal Data Identification Controllers Data Controller Access Controls Processing
In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗
Version history 2
  • 2016-05-04in force CELEX 02016R0679-20160504
  • 2016-04-27 CELEX 32016R0679

If the personal data processed by a controller do not permit the controller to identify a natural person, the data controller should not be obliged to acquire additional information in order to identify the data subject for the sole purpose of complying with any provision of this Regulation. However, the controller should not refuse to take additional information provided by the data subject in order to support the exercise of his or her rights. Identification should include the digital identification of a data subject, for example through authentication mechanism such as the same credentials, used by the data subject to log-in to the on-line service offered by the data controller.

Related across sources

Enforcement ANSPDCP (Romania) - Fine against Homelux SRL Enforcement Tietosuojavaltuutetun toimisto (Finland) - TSV/4630/2023 Guidance Guidelines on processing of personal data through blockchain technologies Case Law SG Nürnberg - S 5 SF 65/24 DS Enforcement Italian DPA: AgID's automatic transfer of PEC addresses to INAD index unlawful Enforcement HDPA (Greece) examines deletion request from National Registry of Undesirable Aliens