GDPR
GDPR Article 15: Right of Access Explained
Establish procedures to respond to data subject access requests within one month, providing prescribed information about processing activities.
OFFICIAL REFERENCE (PARAPHRASED)
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data. (GDPR Article 15)
Last reviewed: June 2026. Not legal or audit advice.
WHAT EVIDENCE SATISFIES THIS
- ✓ DSAR intake and response procedure
- ✓ Identity verification workflow
- ✓ Request log with response timestamps
- ✓ Response templates and exemption documentation
See this control in your personalized checklist
Start free →See your readiness in 5 minutes
Answer a few questions and get a personalized, actionable checklist, free, no card.
Get your free checklist →