Skip to main content

AI Summary of Article 14 Transparent information, communication and modalities for the exercise of the rights of the data subject

The controller is mandated to provide clear and accessible information regarding data processing to data subjects, particularly when addressing children. Information must be delivered in writing or electronically, and can be communicated orally upon request, provided identity is verified.

Timely responses are required for data subject requests, with actions to be taken within one month, extendable by two months for complex cases. Should a request be denied, the controller must promptly inform the data subject, detailing the reasons and options for further recourse. Importantly, all information must be free of charge unless requests are deemed excessive or unfounded.

Version status: Applicable | Document consolidation status: No known changes
Version date: 12 December 2019 - onwards
Version 3 of 3

Article 14 Transparent information, communication and modalities for the exercise of the rights of the data subject

1.The controller shall take appropriate measures to provide any information referred to in Articles 15 and 16 and any communication under Articles 17 to 24 and 35 relating to processing to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child. The information shall be provided in writing, or by other means, including, where appropriate, by electronic means. When requested by the data subject, the information may be provided orally, provided that the identity of the data subject is proven by other means.

2. The controller shall facilitate the exercise of data subject rights under Articles 17 to 24. In the cases referred to in Article 12(2), the controller shall not refuse to act on the request of the data subject for exercising his or her rights under Articles 17 to 24, unless the controller demonstrates that it is not in a position to identify the data subject.