GDPR Article 15: Obligations, Deadlines & Penalties

The controller must provide the data subject with confirmation as to whether or not personal data concerning them are being processed, and if so, access to that data and specific information regarding purposes, categories, recipients, storage periods, rights, sources, and automated decision-making. Regulation (EU) 2016/679, Article 15, Article 15

Where personal data are transferred to a third country or international organisation, the controller must inform the data subject of the appropriate safeguards relating to the transfer pursuant to Article 46. Regulation (EU) 2016/679, Article 15, Article 15

The controller shall provide a copy of the personal data undergoing processing to the data subject. Regulation (EU) 2016/679, Article 15, Article 15

Where the data subject makes the request by electronic means, the controller shall provide the information in a commonly used electronic form, unless otherwise requested by the data subject. Regulation (EU) 2016/679, Article 15, Article 15

The controller must ensure that the right to obtain a copy of personal data does not adversely affect the rights and freedoms of others. Regulation (EU) 2016/679, Article 15, Article 15