Skip to the text
Text as of 4 May 2016 · Regulation (EU) 2016/679, OJ L 119, 4.5.2016 · Same wording as today’s text.Today’s text

Recital 64

Consumer protectionLevel 1RegulationGDPRStage: AdoptedOfficial source

The controller should use all reasonable measures to verify the identity of a data subject who requests access, in particular in the context of online services and online identifiers. A controller should not retain personal data for the sole purpose of being able to react to potential requests.