Article 15 - Right of access by the data subject

Article 15 of the GDPR grants individuals the right to obtain confirmation from a controller about whether their personal data is being processed, and, if so, to access that data along with information on its purpose, retention period, recipients, and the source of the data. Controllers must provide a copy of the data free of charge, unless requests are unfounded or excessive. This right ensures transparency and enables data subjects to verify the lawfulness of processing.