BDO Legal Guide: Ensuring the Right of Access under the GDPR

Is your organization prepared to handle requests for access to personal data?

The right of individuals to access their personal data is one of the core principles of the GDPR. Ensuring this right is not only a legal obligation — it's also fundamental to building trust and transparency.

BDO Legal has created a new guide, “A BDO Legal Guide to the Right of Access in the GDPR,” bringing together key guidance, practical advice, and case law examples from across Europe. This guide will help you:

• understand what information must be provided in response to a request;

• manage complex or repeated access requests;

• meet deadlines and documentation requirements;

• protect the rights and confidentiality of third parties.

The publication includes real-world cases from Germany, Belgium, Italy, the Czech Republic, Spain, and other countries, offering insights into how supervisory authorities apply GDPR rules in practice — including cases that resulted in fines.

📘 Download the full guide here

Whether you're responsible for compliance, working as a data protection officer, or providing legal support, this guide is a valuable resource for anyone seeking to ensure that access requests are handled in a correct, secure, and efficient way.

This guide was developed by the BDO Legal Technology & Data Protection Working Group. Special thanks to Matthias Niebuhr (BDO Legal Germany) for leading the project.