Information under Articles 13 and 14 and communications under Articles 15 to 22D and 34 must be concise, transparent, intelligible, easily accessible and in clear and plain language, especially for children, given in writing or electronically, orally on request once identity is proven. The controller must facilitate the rights, act on requests without undue delay and within the applicable time period (Article 12A), answer electronically where the request came electronically, and if it will not act, say why and point to the right to complain to the controller (section 164A of the 2018 Act, in force 19 June 2026), to complain to the Commissioner and to seek a judicial remedy. Actions are free, except that a manifestly unfounded or excessive request may be refused or charged a reasonable fee, the controller bearing the burden of showing it. With reasonable doubts about identity the controller may ask for more information and delay until identity is confirmed. The Commissioner may publish standardised icons.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.