Which of the following data subject rights provides individuals with entitlements to specific information from the controller upon request?

The right to access is a fundamental data subject right under the General Data Protection Regulation (GDPR). It allows individuals to request and obtain a copy of their personal data from the data controller, as well as information about the processing of that data. This right ensures transparency and gives individuals insight into how their personal information is being used, which is vital for maintaining control over their personal data.

When an individual exercises the right to access, they have the right to know the following:

1. The purposes of processing their personal data.

2. The categories of personal data concerned.

3. The recipients or categories of recipients to whom their data has been or will be disclosed.

4. The data retention period or the criteria used to determine that period.

5. The existence of their rights to rectify, erase, or restrict the processing of their personal data.

6. The information regarding the source of the data if it was not collected directly from the individual.

This right empowers data subjects by providing them visibility and control over their personal information, fostering trust between individuals and organizations that process personal data.