{
  "object_type": "gdpr_agent",
  "id": "agent:eu:gdpr:art-15",
  "system_id": "system:eu:gdpr",
  "schema_version": 1,
  "article": 15,
  "title": "Right of access by the data subject",
  "kind": "business_obligation",
  "decision": "Art. 15 GDPR (Right of access by the data subject) applies to controllers and/or processors processing personal data within the scope of Art. 2 and Art. 3.",
  "obligation": {
    "addressee": "Controllers and/or processors",
    "provision": "Art. 15 GDPR",
    "text": "Verbatim text: see source",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_15"
  },
  "risk": {
    "level": "high",
    "fine_tier": {
      "provision": "Art. 83(5)",
      "max_eur": 20000000,
      "max_turnover_pct": 4
    },
    "basis": "Art. 83 GDPR"
  },
  "action": [
    "Verify identity",
    "Provide a copy of the data and the Art. 15(1) information"
  ],
  "deadline": {
    "deadline": "Within one month of receipt of the request (Art. 12(3)).",
    "provision": "Art. 12(3)"
  },
  "verification": {
    "source": "EUR-Lex, Regulation (EU) 2016/679",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_15",
    "read_at": "2026-10-15"
  },
  "sha256": "d7088a4644c874236c22acda452c44f4f54cf12285f90ff3d7ff592f4b13cac8",
  "version": {
    "agent_version": "1.0.0",
    "risk_version": "1.0",
    "decision_version": "1.0",
    "system_version": "1.0.0",
    "change_score": 0
  },
  "knowledge_card": "https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:gdpr--art-15",
  "api": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent-system?article=15",
  "page": "https://legal.exploreworldai.com/gdpr-agent-system/art-15",
  "source": "Source: NovaCopilot",
  "access_class": "public",
  "access_view": "public"
}