Laws · GDPR ·art-14-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information:
How it connects
Cited by
- Guidelines 05/2020 on consent under Regulation 2016/679
- Guidelines 01/2022 on data subject rights - Right of access
- Guidelines 03/2021 on the application of Article 65(1)(a) GDPR
- Private company working with data from publicly available sources: Insufficient fulfilment of information obligations
- PWC Business Solutions: Insufficient legal basis for data processing
All 37
- BELGIUM DPA: Insufficient fulfilment of data subjects rights
- BELGIUM DPA: Insufficient fulfilment of data subjects rights
- Private Individual: Insufficient legal basis for data processing
- BELGIUM DPA: Insufficient fulfilment of data subjects rights
- Debt collection company: Insufficient legal basis for data processing
- Voorschoten municipality: Non-compliance with general data processing principles
- Clearview AI Inc.: Non-compliance with general data processing principles
- LinkedIn: Insufficient legal basis for data processing
- Company: Non-compliance with general data processing principles
- Legal Person: Insufficient legal basis for data processing
- Experian Nederland B.V.: Insufficient legal basis for data processing
- EDPB Annual Report 2024
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
- CJEU - C-439/19 - Latvijas Republikas Saeima (Penalty points)
- Garante per la protezione dei dati personali (Italy) - 487/2026
- EDPS: European Parliament is sole controller for COVID testing website and failed
- EDPB Annual Report 2025
- EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679
- EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)
- Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak
- Nemzeti Adatvédelmi és Információszabadság Hatóság v UC
- Criminal proceedings against HYA and Others
- RL v Landeshauptstadt Wiesbaden
- HYA and Othersprokuratura
- Ligue des droits humains ASBL v Conseil des ministres
- Land Nordrhein-Westfalen v D.-H. T. as liquidator of J & S Service UG
- European Commission v Ireland
- Staatssecretaris van Justitie en Veiligheid v A and Others
- HDPA (Greece) - 12/2026
- Character Technologies Inc.: Non-compliance with general data processing principles
- LG Frankfurt am Main - 2-06 O 234/25
- Icelandic DPA opens formal proceedings against Isavia over ANPR parking cameras at