Laws · GDPR ·art-12-par-4 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
If the controller does not take action on the request of the data subject, the controller shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action and on the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.
How it connects
Cited by
- Guidelines 01/2022 on data subject rights - Right of access
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
- HUNGARY DPA: Insufficient fulfilment of data subjects rights
- Private enforcement agent: Insufficient fulfilment of data subjects rights
- Med Life SA: Insufficient fulfilment of data subjects rights
All 22
- Legal Person: Insufficient fulfilment of data subjects rights
- Legal Person: Insufficient fulfilment of data subjects rights
- Coordinated Enforcement Action, implementation of the right of access by controllers
- EDPB Annual Report 2024
- Blikk Kft.: Insufficient legal basis for data processing
- Coordinated Enforcement Action,
- AG Arnsberg - 42 C 434/23
- EDPB Annual Report 2021
- EDPB-EDPS Joint Opinion 2/2021 on standard contractual clauses for the transfer of personal data to third countries
- APD/GBA (Belgium) - 97/2026
- Garante per la protezione dei dati personali (Italy) - 476/2026
- Datatilsynet (Denmark) - 2023-31-0321
- DSB (Austria) - DSB-D124.5337
- VG Osnabrück - 7 A 170/24
- High Court examines DPA inquiry into Meta's refusal of raw data access and portability
- Garante warns ReLife Recycling for failing to timely respond to GDPR access request
- IndaNext Hungary Kft. (legal successor of Blikk Kft.): Insufficient legal basis for data processing
Related across sources
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines Apr 17, 2023 Supervision Controllers Supervisory Authorities
Opinion 17/2026 Infor Group — processor BCRs ·Opinion May 11, 2026 International Transfer Processors Codes of Conduct
Opinion 19/2026 Rubrik Group — processor BCRs ·Opinion Jun 8, 2026 International Transfer Processors Codes of Conduct
Opinion 9/2025 Worldline Group — processor BCRs EPDB, Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group, 2025. ·Opinion May 21, 2025 International Transfer Processors Codes of Conduct
Opinion 6/2020 Fujikura Automotive Europe Group (FAE Group) — controller BCRs ·Opinion Jan 29, 2020 International Transfer Codes of Conduct Supervision
Opinion 5/2026 Arcadis Group — processor BCRs ·Opinion Feb 10, 2026 International Transfer Processors Codes of Conduct