In 2024, the European Data Protection Board (EDPB), together with 30 European regulators, conducted a coordinated enforcement action on the right of access under the AVG. This right allows individuals to control how their personal data is processed and is often exercised.

The action followed the EDPB guidelines (01/2022) on the right of access and focused on compliance by organizations. Eleven regulators launched formal investigations, while others conducted fact-finding. This report compiles the findings, including statistics, best practices and challenges. It also includes an overview of national enforcement measures and recommendations for improved compliance.
Download the report here . Download the appendix to the report here .
Source: European Data Protection Board
