EU regulatory register · GDPR
Article 15Right of access by the data subject
CELEX 32016R0679 · Read on 2026-08-18 · Chapter III
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
(a)
the purposes of the processing;
(b)
the categories of personal data concerned;
(c)
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
(d)
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(e)
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(f)
the right to lodge a complaint with a supervisory authority;
(g)
The article continues in the official text.
Other articles in this chapter
Judgments of the Court of Justice
4 decisions
- C-203/22Court of Justice of the European Union
CK v Magistrat der Stadt Wien
Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Article 15(1)(h) – Automated decision-making, including profiling – Scoring – Assessment of the creditworthiness of a natural person – Access to meaningful information about the logic involved in profiling – Verification of the accuracy of the information provided – Directive (EU) 2016/943 – Point 1 of Article 2 – Trade secret – Personal data of third parties.
- C-461/22Court of Justice of the European Union
MK v WB
Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 2(2)(c) – Scope – Exclusion – Purely personal or household activity – Article 4(7) – Controller – Former guardian who performed his or her duties in a professional capacity – Article 15 – Access of the person who has been placed under legal guardianship to data collected by that former guardian during the performance of his or her duties.
- C-312/23Court of Justice of the European Union
Addiko Bank d.d. v Agencija za zaštitu osobnih podataka
Reference for a preliminary ruling – Article 99 of the Rules of Procedure of the Court of Justice – Questions the answer to which may be clearly deduced from the Court’s existing case-law – Protection of natural persons with regard to the processing of personal data and free movement of such data – Regulation (EU) 2016/679 – Article 15 – Right of access by the data subject to the personal data concerning him or her that are undergoing processing – Right to obtain a copy of those data – Concept of ‘copy’ – Reasons for the request for access to those data – Use of the data to bring legal proceedings.
- C-307/22Court of Justice of the European Union
FT v DW
Reference for a preliminary ruling – Processing of personal data – Regulation (EU) 2016/679 – Articles 12, 15 and 23 – Data subject’s right of access to his or her data undergoing processing – Right to obtain a first copy of those data free of charge – Processing of a patient’s data by his or her medical practitioner – Medical records – Reasons for the request for access – Use of data for the purpose of triggering the liability of the person providing treatment – Concept of ‘copy’.
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Six fixed blocks, one source per line
- No sentence written by a language model
- Engine version and read date on every answer
- No customer data, no documents, no advice
- Model card and audit published under the EU AI Act