{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/recitals/64","url":"https://www.headlesslaw.com/gdpr/recitals/64","title":"Recital 64","family":"l1_recital_view","work_id":"gdpr","view_of":"/gdpr/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2016/679, OJ L 119, 4.5.2016","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679","valid_from":"2016-05-04","valid_until":null,"content_id":"ad5ca6475032511d","versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/recitals/64/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/recitals/64/versions/2016-05-04/rev/ad5ca6475032511d","versions_url":"https://www.headlesslaw.com/gdpr/recitals/64/versions","relations_url":"https://www.headlesslaw.com/gdpr/recitals/64/relations","act_url":"https://www.headlesslaw.com/gdpr/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"gdpr","path":"/gdpr/recitals","name":"GDPR","number":"Regulation (EU) 2016/679","celex":"32016R0679","title_official":null,"document_date":null},"position":{"kind":"recital","key":"64","index":64,"articles":173,"annexes":0},"prev":{"path":"/gdpr/recitals/63","key":"63","title":"Recital 63"},"next":{"path":"/gdpr/recitals/65","key":"65","title":"Recital 65"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/gdpr/recitals.md","unit_text_sha256":"bd9b8eb43d0a34f8fe0794a67fe66f1cf14b8e6cc50624098c5591187ba4562a","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"gdpr/recitals/rec/64","kind":"recital","key":"64","heading":"","text":"The controller should use all reasonable measures to verify the identity of a data subject who requests access, in particular in the context of online services and online identifiers. A controller should not retain personal data for the sole purpose of being able to react to potential requests.","marks":[],"text_hash":"bd9b8eb43d0a34f8fe0794a67fe66f1cf14b8e6cc50624098c5591187ba4562a","revision":1,"blocks":[{"locator":"gdpr/recitals/rec/64/block/1","text_hash":"bd9b8eb43d0a34f8fe0794a67fe66f1cf14b8e6cc50624098c5591187ba4562a","revision":1}]}}