CRIF: When a “Copy” of Your Personal Data Requires More Than a Data List
CRIF defines what a “copy” means under the GDPR right of access. Article 15 does not automatically require disclosure of underlying documents—but extracts or entire documents may be necessary when context is needed to make personal data intelligible and access meaningful.