Laws · GDPR ·art-12-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
The controller shall take appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34 relating to processing to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child. The information shall be provided in writing, or by other means, including, where appropriate, by electronic means. When requested by the data subject, the information may be provided orally, provided that the identity of the data subject is proven by other means.
How it connects
Cited by
- CJEU: PNR Directive Valid if Limited to the “Strictly Necessary”
- Guidelines 01/2022 on data subject rights - Right of access
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
- Guidelines 8/2020 on the targeting of social media users
- Guidelines 02/2021 on virtual voice assistants
All 147
- BELGIUM DPA: Insufficient fulfilment of data subjects rights
- Healthcare provider: Insufficient fulfilment of information obligations
- Television broadcaster: Insufficient fulfilment of information obligations
- Huppuís ehf: Non-compliance with general data processing principles
- Pediatrician: Insufficient fulfilment of data subjects rights
- Dixons South East Europe ΑΕΒΕ-ΚΩΤΣΟΒΟΛΟΣ: Insufficient fulfilment of data subjects rights
- National Bank of Greece: Insufficient fulfilment of data subjects rights
- Ciechi Ardizzone Gioeni di Catania: Non-compliance with general data processing principles
- Facebook Ireland Limited: Insufficient fulfilment of information obligations
- Car importer: Insufficient legal basis for data processing
- IAB Europe: Insufficient legal basis for data processing
- ΛΙΜΕΝΟΣ ΗΡΑΚΛΕΙΟΥ Α.Ε.: Insufficient fulfilment of data subjects rights
- Medical clinic: Insufficient fulfilment of information obligations
- Klarna Bank AB: Insufficient fulfilment of information obligations
- Brussels Airport Charleroi: Insufficient legal basis for data processing
- SA Rossel & Cie: Insufficient legal basis for data processing
- Budapest Bank Zrt.: Insufficient legal basis for data processing
- Otavamedia Oy: Insufficient fulfilment of data subjects rights
- Company: Insufficient fulfilment of information obligations
- Company: Insufficient fulfilment of information obligations
- CDI Transport Intern și Internațional SRL: Insufficient fulfilment of data subjects rights
- Meta Platforms, Inc.: Non-compliance with general data processing principles
- Bank: Insufficient legal basis for data processing
- TECHPUMP SOLUTIONS S.L.: Non-compliance with general data processing principles
- AMPLIFON Hungary Trade and Service Provider LLC: Non-compliance with general data processing principles
- Vodafone Italia S.p.A.: Non-compliance with general data processing principles
- Alpha Exploration: Non-compliance with general data processing principles
- FCA Italy S.p.A.: Insufficient fulfilment of data subjects rights
- Douglas Italia S.p.a.: Non-compliance with general data processing principles
- Sats ASA: Insufficient fulfilment of data subjects rights
- Edison Energia S.p.A.: Non-compliance with general data processing principles
- Company: Insufficient fulfilment of information obligations
- Company: Insufficient fulfilment of information obligations
- Company: Insufficient fulfilment of information obligations
- Company: Insufficient fulfilment of information obligations
- Company: Insufficient fulfilment of information obligations
- TV2 Média Csoport Zrt.: Non-compliance with general data processing principles
- Coin dealer: Non-compliance with general data processing principles
- Spotify: Insufficient fulfilment of data subjects rights
- MALTA DPA: Insufficient fulfilment of data subjects rights
- Website operator: Non-compliance with general data processing principles
- Rinascente S.p.A.: Non-compliance with general data processing principles
- Suomen Yritysrekisteri: Insufficient fulfilment of data subjects rights
- TikTok Limited: Non-compliance with general data processing principles
- Debt collection company: Insufficient legal basis for data processing
- Tiscali Italia SpA: Non-compliance with general data processing principles
- Uber Technologies Inc. Uber B.V.: Insufficient fulfilment of information obligations
- Azienda Trasporto Passeggeri Emilia-Romagna S.p.A.: Non-compliance with general data processing principles
- Municipality of Modica: Non-compliance with general data processing principles
- Vinted: Insufficient fulfilment of data subjects rights
- Clearview AI Inc.: Non-compliance with general data processing principles
- Hospital: Insufficient technical and organisational measures to ensure information security
- Netflix International B.V.: Insufficient fulfilment of information obligations
- Fastweb S.p.A.: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- Realmaps S.r.l.: Insufficient legal basis for data processing
- Multiple Companies: Insufficient legal basis for data processing
- Velvet Medical SRL: Insufficient fulfilment of data subjects rights
- Noy Business Tranzactions SRL: Insufficient fulfilment of data subjects rights
- Tensa Art Design S.A.: Insufficient legal basis for data processing
- Office Nova Concept SRL: Insufficient fulfilment of data subjects rights
- Dante International SA: Insufficient fulfilment of data subjects rights
- Data Diggers Market Research SRL: Non-compliance with general data processing principles
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient fulfilment of data subjects rights
- Legal Person: Insufficient fulfilment of data subjects rights
- Self Employed Person: Insufficient legal basis for data processing
- Legal Person: Insufficient fulfilment of data subjects rights
- Nursery School “La Combricola Dei Birichini Di Betty”: Non-compliance with general data processing principles
- Experian Nederland B.V.: Insufficient legal basis for data processing
- Provincia Autonoma di Bolzano: Non-compliance with general data processing principles
- Municipality of Moschato–Tavros: Insufficient legal basis for data processing
- Telecommunications operator (operator of electronic communications networks and services): Non-compliance with general data processing principles
- FT Solutions S.r.l.: Non-compliance with general data processing principles
- Comune di Curtarolo: Insufficient legal basis for data processing
- Multimedia News Società Cooperativa: Insufficient fulfilment of data subjects rights
- Comune di Orte: Non-compliance with general data processing principles
- One-Stop-Shop case digest on right of access
- Coordinated Enforcement Action, implementation of the right of access by controllers
- EDPB Annual Report 2024
- Österreichische Datenschutzbehörde v CRIF
- Comune di Nave: Insufficient legal basis for data processing
- Istituto San Giuseppe La Salle di Milano: Non-compliance with general data processing principles
- Ministero della Cultura: Non-compliance with general data processing principles
- Comune di Coccaglio: Non-compliance with general data processing principles
- Comune di Mazara del Vallo: Insufficient legal basis for data processing
- Vodafone – PANAFON A.E.E.T.: Insufficient fulfilment of data subjects rights
- Société Wallonne des Eaux: Insufficient legal basis for data processing
- Isabel SA: Insufficient fulfilment of data subjects rights
- Coordinated Enforcement Action,
- ANSPDCP (Romania) - Fine against Ascendex Technology SRL
- Garante per la protezione dei dati personali (Italy) - 487/2026
- APD/GBA (Belgium) - 11/2022
- Belgian DPA: Roularta Media Group violated cookie consent rules
- Belgian DPA finds MediaHuis violated GDPR fairness over cookie banner design
- Tribunal of Bologna orders Comet s.p.a. to fulfil data subject's Art. 15 GDPR access
- Austrian FAC: DPA rightly found loyalty program consent for profiling invalid under GDPR
- EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro
- EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679
- EDPB Annual Report 2022
- EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse
- EDPB Annual Report 2021
- EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)
- EDPB-EDPS Joint Opinion 2/2021 on standard contractual clauses for the transfer of personal data to third countries
- WhatsApp Ireland Ltd v European Data Protection Board
- CK v Magistrat der Stadt Wien
- Meta Platforms Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V
- Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság
- Proceedings brought by J.M
- HYA and Othersprokuratura
- WhatsApp Ireland Ltd v European Data Protection Board
- Proximus NV v Gegevensbeschermingsautoriteit
- Ligue des droits humains ASBL v Conseil des ministres
- Athanassios Oikonomopoulos v European Commission
- Safe Interenvios, SA v Liberbank, SA and Others
- Heinz Huber v Bundesrepublik Deutschland
- Commission of the European Communities v Kingdom of the Netherlands
- APD/GBA (Belgium) - 97/2026
- Garante per la protezione dei dati personali (Italy) - 457/2026
- EDPB - Binding Decision 1/2026
- NAIH (Hungary) - NAIH-11443-3/2026
- BGH - VI ZR 476/18
- Garante per la protezione dei dati personali (Italy) - 483/2026
- Garante fines Lusha Systems Inc. over unauthorized B2B contact database
- NAIH (Hungary) - NAIH-450-7-2026
- BAG - 8 AZR 169/25
- NAIH (Hungary) - NAIH-4462-5-2026
- MEDE S.A.: Non-compliance with general data processing principles
- Market-In: Non-compliance with general data processing principles
- UODO fines controller for refusing to cooperate and provide information in two data
- Ascendex Technology SRL: Insufficient fulfilment of data subjects rights
- Italian DPA: Municipality of Rieti breached GDPR by publishing 31,000 taxpayers' waste
- Municipality of Vasto: Insufficient fulfilment of information obligations
- Edizioni Grandangolo di Giuseppe Castaldo: Non-compliance with general data processing principles
- Character Technologies Inc.: Non-compliance with general data processing principles
- Municipality of Rieti: Non-compliance with general data processing principles
- Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento: Insufficient legal basis for data processing
- Italian DPA: employer breached Art. 15 GDPR by ignoring access request over disciplinary
- Icelandic DPA opens formal proceedings against Isavia over ANPR parking cameras at
- ZeniΘ (Thessaloniki-Thessalia Gas Supply Company S.A.): Insufficient fulfilment of data subjects rights
- Operator of an online shop for alcoholic beverages: Insufficient fulfilment of information obligations
- Operator of an online marketplace: Insufficient fulfilment of information obligations
Related across sources
C-422/24 Case C-422/24 - AB Storstockholms Lokaltrafik. A new page has been created with the following information: "" Jan 7, 2026 Personal Data Fairness & Transparency Controllers
C-757/22 Meta Platforms Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V In a preliminary ruling requested by the German Federal Court of Justice (Bundesgerichtshof), the Court of Justice of the European Union interpreted Article 80(2) GDPR in the… Fourth Chamber Jul 11, 2024 Personal Data Transparency Fairness & Transparency
C-579/21 Proceedings brought by J.M In Case C-579/21, the Court of Justice of the European Union ruled on a preliminary reference from the Itä-Suomen hallinto-oikeus (Administrative Court of Eastern Finland)… First Chamber Jun 22, 2023 Right of Access Personal Data Right to Restriction
C-654/23 Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) Het Hof van Justitie van de EU (Eerste Kamer) beantwoordt een prejudiciële vraag over de uitleg van artikel 13 van Richtlijn 2002/58/EC (ePrivacy) en de verhouding tot de GDPR,… Mar 27, 2025 Telecommunications Personal Data Marketing
C-154/21 RW v Österreichische Post AG The Court of Justice of the European Union (First Chamber), in response to a preliminary reference from the Oberster Gerichtshof (Austrian Supreme Court), interpreted Article… First Chamber Jan 12, 2023 Right of Access Personal Data Recipient
C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… First Chamber Feb 27, 2025 Profiling Automated Decision-Making Marketing