Can I access personal data a company holds about me?

How the answer differs across 10 jurisdictions

The Short Answer

You can request access to your personal data in writing or electronically from any data controller; they must respond within one month, free of charge, and provide a complete, intelligible copy of all your processed data.

1 month
Response deadline
Free
No fee required
Art. 15 GDPR
Legal basis
BDSG §83
Remedy for violation
The Short Answer

No, a company generally cannot refuse your request to see your personal information — under PIPEDA, you have a legal right to access it.

Yes
Right to access
30 days
Response deadline
$0
No fee (usually)
Written
Request format
AustraliaFull article
The Short Answer

Yes, you have a legal right to access your personal information held by most Australian companies under the Privacy Act 1988.

30 days
Response time
$0 fee
Standard access fee
APP 12
Relevant privacy principle
13 months
Retention period for requests
The Short Answer

Under Irish law, a company must respond to your data access request within one month. If they fail to do so, you can complain to the Data Protection Commission.

1 month
Response deadline
€20,000
Max fine for non-compliance
Free
DPC complaint cost
72 hours
Breach reporting window
SingaporeFull article
The Short Answer

Yes, you have the right to request access to your personal data held by a company in Singapore under the Personal Data Protection Act 2012.

30 days
Response deadline
S$5
Max fee allowed
Written request
Required format
s. 21
PDPA section
European UnionFull article
The Short Answer

You have the right to obtain a copy of all personal data a company holds about you under the GDPR, free of charge and within one month.

1 month
Response deadline
Free
No fee (usually)
GDPR Art. 15
Legal basis
All data
Scope of access
The Short Answer

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have rights to access, correction, erasure, grievance redressal, and data portability (where technically feasible) of your personal data.

8 rights
Statutory rights
30 days
Response deadline
₹50 cr
Max penalty
2023
Enactment year
The Short Answer

You can make a subject access request (SAR) in writing or verbally to any UK company holding your personal data — they must respond within one month and provide all your data free of charge, unless the request is manifestly unfounded or excessive.

1 month
Response deadline
£0
Maximum fee
30 days
Standard timeframe
GDPR
Governing law
US-CaliforniaFull article
The Short Answer

Under the CCPA, you have the right to know what personal information a business collects about you, to delete that information, to opt out of its sale, and to non-discrimination for exercising these rights.

12 months
Lookback period
$7,500
Max civil penalty
45 days
Response deadline
$100–$750
Statutory damages
The Short Answer

Yes, you can request a company in Japan to disclose your personal information under the Act on the Protection of Personal Information (APPI). The company must respond within 30 days.

30 days
Response deadline
APPI
Governing law
Article 28
Disclosure right
Free
No fee required

Read Full Articles

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: June 2026.