Databeskyttelsesforordningen betragtning 64

English language version pr. 2026-10-06 tier 2 Forordning (EU) 2016/679, CELEX 32016R0679

The controller should use all reasonable measures to verify the identity of a data subject who requests access, in particular in the context of online services and online identifiers. A controller should not retain personal data for the sole purpose of being able to react to potential requests.