GDPR-12-09
Requirement
12 — Transparent information, communication and modalities for the exercise of the rights of the data subject
Provide electronic response to electronic requests unless otherwise requested
Description
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
GDPR-12-01
Transparency
Provide information in transparent, accessible form with clear language
GDPR-12-02
Requirement
Provide information in writing or other means including electronic
GDPR-12-03
Requirement
Provide information orally when requested if identity verified
GDPR-12-04
Requirement
Facilitate exercise of data subject rights
GDPR-12-05
Prohibition
Cannot refuse to act unless unable to identify data subject
GDPR-12-06
Requirement
Provide information on action taken within one month
GDPR-12-07
Requirement
May extend response period by two months if justified
GDPR-12-08
Requirement
Inform data subject of extension within one month with reasons
GDPR-12-10
Requirement
Inform data subject of reasons for not taking action within one month
GDPR-12-11
Requirement
Provide information and communications free of charge
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started