GDPR-12-13 Requirement 12 — Transparent information, communication and modalities for the exercise of the rights of the data subject

Bear burden of demonstrating manifestly unfounded or excessive character

Description

Controllers must bear the burden of demonstrating the manifestly unfounded or excessive character of the request.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Provide information in transparent, accessible form with clear language

Provide information in writing or other means including electronic

Provide information orally when requested if identity verified

Facilitate exercise of data subject rights

Cannot refuse to act unless unable to identify data subject

Provide information on action taken within one month

May extend response period by two months if justified

Inform data subject of extension within one month with reasons

Provide electronic response to electronic requests unless otherwise requested

Inform data subject of reasons for not taking action within one month

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started