Understand the rule
The right of access includes confirmation of processing, a copy of personal data and information about its use. It does not automatically provide every internal document or other people’s information.
Prepare your next steps
- Find the organisation and its privacy contact through its official website, not a suspicious link.
- Identify the account, period or service. Request your data and information about purposes, recipients and retention.
- Keep the request, date and response. If identity evidence is requested, check why it is necessary and share only what is needed securely.
Practical example
Fictional example: a former customer asks why messages keep arriving. They request the contact details used and their source rather than immediately sending a complete identity-card copy.
What to check
Access, correction, erasure and objection are separate rights. A legal retention duty may limit erasure. Consult the Belgian data protection authority’s procedures if difficulties persist.
Frequently asked questions
Must I explain why I want access?
In principle, you do not need to justify an access request. The organisation may still need to identify the person correctly.
Sources and useful texts
Sources consulted on 27 September 2026
General information about Belgian law. Region, date of events and your circumstances can change the applicable rule.
Text version ↓