ANNEX – FLOWCHART Step 1: How to interpret and assess the request? Does the request concern personal data?
NO
NO access request
NO
Request on a different legal basis
NO
Request on a different data subject right
NO
Authorisation check (in case of a request by a third party)
YES
Is it a GDPR request? YES
Is it an Art. 15 request? YES
Does the request relate to the requesting person? YES
YES
Identity check, in case of doubts
What is the scope of the request? Verify the scope of the request in line with section 4 of the Guidelines (if a large quantity of information is processed/request is imprecise ask the data subject to further specify the request).
58 Adopted - version for public consultation
NO
No access
