The General Data Protection Regulation provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, and a right of data subjects, with strict time limits for complying. Article 15 of the GDPR provides that the data subject has the right to request confirmation of whether personal data concerning them is being processed, and where it is, access to the personal data and certain further information—a right of access. The right of access is very similar in the GDPR to previous legislation, with a handful of notable changes, including in relation to the supplementary information the data subject has the right to obtain. In addition to supplying a copy of the data requested, you must supply the following information: • the purposes of the processing • the categories of personal data concerned • the recipients or categories of recipient to whom the personal data has been or will be disclosed, in particular recipients in third countries