Recital 52*
Go to related Article 11
Go to related Article 15
Commission proposal
(52) The controller should use all reasonable measures to verify the identity of a data subject that requests access, in particular in the context of online services and online identifiers. A controller should not retain personal data for the unique purpose of being able to react to potential requests. |
EDRi’s Proposed amendment
(52) The controller should use all reasonable measures to verify the |
Justification
It is entirely possible that in some circumstances positive identification of the data subject would not be strictly necessary to provide access.