GDPR-15-03 Transparency 15 — Right of access by the data subject

Disclose purposes of processing

Description

Controllers must inform data subjects of the purposes for which their personal data is being processed when responding to access requests.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Provide confirmation of personal data processing

Provide access to personal data and processing information

Disclose categories of personal data

Disclose recipients of personal data

Disclose data retention period or criteria

Inform about data subject rights

Inform about complaint rights

Disclose data source information

Disclose automated decision-making information

Inform about international transfer safeguards

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started