This document explains the right of access for data subjects under Article 15 GDPR. It details three elements of access right: 1) confirmation of data processing, 2) access to the data itself, and 3) information about the processing. The guidelines cover the assessment of access requests, formats for providing access, time frames for response, and address limits and restrictions on the right of access, including the impact on the rights of others and circumstances where requests may be considered unfounded or excessive.
Author: European Data Protection Board
Status: Adopted / Published
Adoption date: 2023-04-17
Last updated: 08 Aug 2025
Category: Guidance
Subcategory: Official guidance