4.2.3 4.3 5
The scope of a new request to access................................................................. 35
Information on the processing and on data subject rights ............................................ 35
How can a controller provide access?............................................................................... 39 5.1
How can the controller retrieve the requested data?................................................... 39
5.2
Appropriate measures for providing access ................................................................ 40
5.2.1
Taking “appropriate measures” ......................................................................... 40
5.2.2
Different means to provide access ..................................................................... 41
5.2.3 Providing access in a ”concise, transparent, intelligible and easily accessible form using clear and plain language” ............................................................................................... 42 5.2.4 A vast amount of information necessitates specific requirements on how the information is provided.................................................................................................. 44 5.2.5 5.3 6
Format .......................................................................................................... 45
Timing for the provision of access ............................................................................. 47
Limits and restrictions of the right of access ...................................................................... 49 6.1
General remarks .................................................................................................... 49
6.2
Article 15 (4) GDPR ................................................................................................. 49
6.3
Article 12(5) GDPR .................................................................................................. 53
6.3.1
What does manifestly unfounded mean?............................................................ 53
6.3.2
What does excessive mean? ............................................................................. 53
6.3.3
Consequences ................................................................................................ 56
6.4 Possible restrictions in Union or Member States law based on Article 23 GDPR and derogations ..................................................................................................................... 57 Annex – Flowchart............................................................................................................... 58
6 Adopted - version for public consultation
