Laws · GDPR ·art-12-par-2 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
The controller shall facilitate the exercise of data subject rights under Articles 15 to 22. In the cases referred to in Article 11(2), the controller shall not refuse to act on the request of the data subject for exercising his or her rights under Articles 15 to 22, unless the controller demonstrates that it is not in a position to identify the data subject.
How it connects
Cited by
- Guidelines 01/2022 on data subject rights - Right of access
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
- CZECH REPUBLIC DPA: Insufficient fulfilment of data subjects rights
- CZECH REPUBLIC DPA: Non-compliance with general data processing principles
- Magazine publisher: Insufficient legal basis for data processing
All 53
- Magyar Telekom Nyrt.: Insufficient fulfilment of data subjects rights
- NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε.: Non-compliance with general data processing principles
- Austrian Post: Insufficient fulfilment of data subjects rights
- Sky Italia S.r.l.: Insufficient legal basis for data processing
- ΚΑΠΑ ΛΑΜΔΑ ΩΜΕΓΑ ΔΙΑΦΗΜΙΣΤΙΚΗ ΕΜΠΟΡΙΚΗ ΜΟΝΟΠΡΟΣΩΠΗ ΕΤΑΙΡΕΙΑ ΠΕΡΙΟΡΙΣΜΕΝΗΣ ΕΥΘΥΝΗΣ: Insufficient legal basis for data processing
- DPG Media Magazines B.V.: Insufficient fulfilment of data subjects rights
- Company: Insufficient legal basis for data processing
- Nationale Maatschappij der Belgische Spoorwegen: Insufficient legal basis for data processing
- DO VALUE GREECE LOANS & CREDITS CLAIM MANAGEMENT S.A.: Insufficient fulfilment of data subjects rights
- Physician: Insufficient fulfilment of data subjects rights
- Burwebs S.L.: Non-compliance with general data processing principles
- Physician: Insufficient fulfilment of data subjects rights
- Website operator: Insufficient fulfilment of data subjects rights
- Libra Internet Bank SA: Insufficient fulfilment of data subjects rights
- TIM S.p.A.: Insufficient legal basis for data processing
- Dante International SA: Insufficient fulfilment of data subjects rights
- Noi Compriamo Auto.it S.r.l.: Non-compliance with general data processing principles
- Legal Person: Insufficient legal basis for data processing
- Fan Courier Express S.R.L.: Insufficient fulfilment of data subjects rights
- One-Stop-Shop case digest on right of access
- Coordinated Enforcement Action, implementation of the right of access by controllers
- Statement 2/2025 on the implementation of the PNR Directive in light of CJEU Judgment C-817/19
- Accountancy Firm: Insufficient legal basis for data processing
- Radio Immagine Uno S.r.l.: Insufficient fulfilment of data subjects rights
- Law Firm: Insufficient fulfilment of data subjects rights
- Belgian DPA finds MediaHuis violated GDPR fairness over cookie banner design
- HDPA (Greece) - 54/2024
- Report of the work undertaken by the ChatGPT Taskforce
- EDPB Annual Report 2023
- EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro
- EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679
- EDPB Annual Report 2022
- EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse
- EDPB Annual Report 2021
- EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)
- Proximus NV v Gegevensbeschermingsautoriteit
- Criminal proceedings against VD bd]&
- Ligue des droits humains ASBL v Conseil des ministres
- Tele2 (Netherlands) BV and Others v Autoriteit Consument en Markt (ACM)
- The data subject’s right to access to information under GDPR and the right of the data controller to protect its know-how
- APD/GBA (Belgium) - 97/2026
- EDPB - Binding Decision 1/2026
- Cour Administrative - 49701C
- Finnish DPA: requesting address, ID number and strong authentication for access request
- Datatilsynet (Denmark) - 2023-31-0321
- Garante per la protezione dei dati personali (Italy) - 556/2026
- Market-In: Non-compliance with general data processing principles
- Lidl Italia S.r.l.: Insufficient fulfilment of data subjects rights