Laws · GDPR ·art-13-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information:
How it connects
Cited by
- CJEU: Camera image of identifiable person constitutes personal data
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
- Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement
- PWC Business Solutions: Insufficient legal basis for data processing
- HUNGARY DPA: Insufficient fulfilment of information obligations
All 107
- Website operator: Non-compliance with general data processing principles
- Operator of a care facility: Insufficient legal basis for data processing
- UAB VS FITNESS: Non-compliance with general data processing principles
- Huppuís ehf: Non-compliance with general data processing principles
- Facebook Ireland Limited: Insufficient fulfilment of information obligations
- Lisbon City Council: Insufficient legal basis for data processing
- Medical clinic: Insufficient fulfilment of information obligations
- Brussels Airport Zaventem: Insufficient legal basis for data processing
- Brussels Airport Charleroi: Insufficient legal basis for data processing
- Dutch Foreign Ministry: Insufficient technical and organisational measures to ensure information security
- Workshop: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- Easylife Ltd.: Insufficient legal basis for data processing
- Physician: Insufficient fulfilment of data subjects rights
- Setúbal municipality: Non-compliance with general data processing principles
- Meta Platforms Ireland Limited: Non-compliance with general data processing principles
- Praktiškas UAB: Insufficient legal basis for data processing
- WhatsApp Ireland Ltd.: Insufficient legal basis for data processing
- Company: Insufficient fulfilment of information obligations
- Physician: Insufficient fulfilment of data subjects rights
- Debt collection agency: Insufficient technical and organisational measures to ensure information security
- I&S Limited Kft: Non-compliance with general data processing principles
- Sports betting operator: Insufficient legal basis for data processing
- TikTok Limited: Non-compliance with general data processing principles
- Zagreb Holding d.o.o.: Insufficient fulfilment of information obligations
- Hotel: Insufficient legal basis for data processing
- Betting company: Insufficient legal basis for data processing
- Betting company: Insufficient legal basis for data processing
- Debt collection company: Insufficient legal basis for data processing
- Tiscali Italia SpA: Non-compliance with general data processing principles
- Uber Technologies Inc. Uber B.V.: Insufficient fulfilment of information obligations
- Betting company: Insufficient legal basis for data processing
- Betting company: Insufficient legal basis for data processing
- LinkedIn: Insufficient legal basis for data processing
- Hospital: Insufficient technical and organisational measures to ensure information security
- Netflix International B.V.: Insufficient fulfilment of information obligations
- Centrum Medyczne Ujastek Sp. z o.o.: Non-compliance with general data processing principles
- TikTok Technology Limited: Insufficient legal basis for data processing
- Departement of Social Security: Insufficient legal basis for data processing
- Company: Non-compliance with general data processing principles
- Sligo County Council: Non-compliance with general data processing principles
- Legal Person: Insufficient legal basis for data processing
- Self Employed Person: Insufficient fulfilment of data subjects rights
- Legal Person: Insufficient legal basis for data processing
- Municipality of Buccino: Insufficient legal basis for data processing
- Telecommunications operator (operator of electronic communications networks and services): Non-compliance with general data processing principles
- Statement 2/2025 on the implementation of the PNR Directive in light of CJEU Judgment C-817/19
- Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- EDPB Annual Report 2024
- Guidelines 3/2025 on the interplay between the DSA and the GDPR
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
- Bundesverband der Verbraucherzentralen v Planet49 GmbH
- Court of Justice of the European Union - Case C-422/24 - AB Storstockholms Lokaltrafik.
- Istituto San Giuseppe La Salle di Milano: Non-compliance with general data processing principles
- Company: Insufficient legal basis for data processing
- Physician: Insufficient fulfilment of data subjects rights
- University of Szeged: Insufficient legal basis for data processing
- Hungarian University of Agriculture and Life Sciences: Insufficient legal basis for data processing
- Garante per la protezione dei dati personali (Italy) - 487/2026
- Belgian DPA: Roularta Media Group violated cookie consent rules
- AZOP (Croatia) - Decision 14-09-2023
- HDPA (Greece) - 32/2020
- EWCA - Dawson-Damer v Taylor Wessing LLP
- EDPB Annual Report 2025
- EDPB Annual Report 2023
- EDPB Annual Report 2022
- EDPB Annual Report 2021
- Integritetsskyddsmyndigheten v AB Storstockholms Lokaltrafik
- Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Agentsia po vpisvaniyata v OL
- HTB Neunte Immobilien Portfolio geschlossene Investment UG & Co. KG and Ökorenta Neue Energien Ökostabil IV geschlossene Investment GmbH & Co. KG v Müller Rechtsanwaltsgesellschaft mbH and Others
- La Quadrature du Net and Others v Premier ministre and Ministère de la Culture
- Criminal proceedings against Unknown individuals
- HYA and Othersprokuratura
- Criminal proceedings against VD bd]&
- Ligue des droits humains ASBL v Conseil des ministres
- G.D. v The Commissioner of the Garda Síochána and Others
- Criminal proceedings against HP
- StWL Städtische Werke Lauf a.d. Pegnitz GmbH v eprimo GmbH
- Mircom International Content Management & Consulting (M.I.C.M.) Limited v Telenet BVBA
- Criminal proceedings against H. K
- Proceedings brought by Ministerio Fiscal
- Peter Puškár v Finančné riaditeľstvo Slovenskej republiky and Kriminálny úrad finančnej správy
- Tele2 Sverige AB v Post- och telestyrelsen and Secretary of State for the Home Department v Tom Watson and Others
- Safe Interenvios, SA v Liberbank, SA and Others
- KPN BV v Autoriteit Consument en Markt (ACM)
- Judgment of the Court (Third Chamber), 7 November 2013.#Institut professionnel des agents immobiliers (IPI) v Geoffrey Englebert and Others.#Request for a preliminary ruling from the Cour constitutionnelle (Belgium).#Processing of personal data — Directive 95/46/EC — Articles 10 and 11 — Obligation to inform — Article 13(1)(d) and (g) — Exceptions — Scope of exceptions — Private detectives acting for the supervisory body of a regulated profession — Directive 2002/58/EC — Article 15(1).#Case C‑47
- HDPA (Greece) - 12/2026
- NAIH (Hungary) - NAIH-11443-3/2026
- NAIH (Hungary) - NAIH-450-7-2026
- NAIH (Hungary) - NAIH-4462-5-2026
- US Zagreb - Us I-4772/2023-10
- MEDE S.A.: Non-compliance with general data processing principles
- DSB: Retailer must grant full access and delete data after third-party fraud order
- HDPA orders TEIRESIAS S.A. to ensure data accuracy under Art. 5(1)(d) GDPR
- Lepida S.c.p.A.: Non-compliance with general data processing principles
- Character Technologies Inc.: Non-compliance with general data processing principles
- European Commission v Hungary
- CNIL fines EXTIA for failing to properly handle job applicant erasure requests
- Guidelines 04/2026 on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR
- Operator of an online shop for alcoholic beverages: Insufficient fulfilment of information obligations
- Operator of an online marketplace: Insufficient fulfilment of information obligations