EDPB CEF Report on the Right of Access

2024 Coordinated Enforcement Action: Implementation of the right of access by controllers

This report, part of the EDPB's Coordinated Enforcement Framework (CEF) for 2024, focuses on the right of access under Article 15 of the GDPR. It provides an analysis of how organizations across the EU handle data subject requests for access to their personal data. The report identifies common issues, such as delays, incomplete responses, or refusals to provide data, and highlights best practices to ensure compliance. Recommendations include improving transparency, simplifying procedures for access requests, and providing clear guidance to data subjects. The report aims to strengthen harmonized enforcement of the GDPR and ensure that the right of access is respected across Member States.