What is Article 15 of the GDPR?

Understanding Your Rights: Article 15 of the GDPR

Have you ever wondered what personal information your employer holds about you—and why they’re processing it? Under Article 15 of the General Data Protection Regulation (GDPR), you have a clear, enforceable right to know.

This article grants individuals, including employees, the right to access their personal data. In simple terms, you can ask your employer whether they’re processing any data related to you—and if so, you’re entitled to see it and understand how it’s being used. This is known as the “right of access,” and it’s a cornerstone of data transparency in the EU.

When you make a request under Article 15, your employer must confirm if they’re handling your personal data. If they are, they must provide specific details: the purposes of processing, the categories of data collected, who it’s shared with, how long it’s stored, and your rights to correct or erase it. They must also explain whether automated decision-making is involved and, if so, how it works.

This right isn’t limited to employees—it applies to any individual whose data is processed by an organization operating within the GDPR’s scope. Importantly, the request must be fulfilled without undue delay, typically within one month, and often at no cost to you.

The goal of Article 15 is simple: empower individuals with knowledge. By knowing what data is held and why, you can better protect your privacy and hold organizations accountable. In practice, this means you shouldn’t have to guess how your personal information is being used at work.

Whether you're checking for compliance or simply want clarity, Article 15 puts you in control. It’s not just a legal clause—it’s a tool for transparency in the digital age.