Art.12 — Transparent communication and handling of rights requests

Requirement

Information and communications to data subjects must be concise, transparent, intelligible and easily accessible, in clear and plain language. Requests to exercise rights must be answered without undue delay and within one month (extendable by two further months for complex requests), free of charge, with reasonable identity verification and reasons given for any refusal.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.