True or false: Information provision is required even if it entails disproportionate effort.

The assertion that information provision is required even if it entails disproportionate effort is considered false. According to the General Data Protection Regulation (GDPR), data controllers are obligated to provide information to data subjects about the processing of their personal data under certain conditions, but this obligation is balanced against practicality and feasibility.

The key principle here is proportionality. The GDPR does not require data controllers to take unreasonable steps to provide information if the effort required could be disproportionate to the context. For example, if fulfilling a request for information demands exorbitant resources or creates an undue burden on the organization without sufficient justification, then the obligation may not apply in that specific situation.

This balance ensures that while transparency and the right to access are fundamental rights under GDPR, they must remain practical and achievable, acknowledging the realities of data management and resource allocation. Hence, the correct understanding is that while information should generally be available, the requirement can be mitigated by considerations of effort and feasibility.