Article 26 (formalities)

• 1

  When processing requests referred to in Articles 25 and 28, the controller shall ensure that the identity of the requester is properly established. Where the controller has reason to doubt the identity of the person making the request, it may request the necessary additional information to confirm the identity of the data subject.

• 2

  Requests in respect of minors who have not yet reached the age of sixteen years and in respect of persons under guardianship are made by their legal representatives. The communication in question is also made to the legal representatives.

• 3

  Requests may also be made by a lawyer to whom the person concerned has granted special authorization for the purpose of exercising his rights under this law and who makes the request solely with the intention of representing his client's interests. The communication in question shall be made to the lawyer. The person in charge may impose requirements on the special authorization.