An individual's legal right to request and obtain a copy of their personal data held by an organization, along with information about how it is being used.
The right of access (also called the right to access or subject access right) allows individuals to find out what personal information an organization holds about them, why it is held, how it is used, and with whom it is shared. This right is fundamental to privacy accountability.
In Canada, PIPEDA gives individuals the right to access their personal information held by private sector organizations subject to the Act. Federal government institutions are subject to the Privacy Act. Provincial privacy laws provide similar rights in their respective jurisdictions.
Under GDPR, the right of access is one of the core rights of data subjects and must be fulfilled within one month of a request.
Example: A person suspects their insurance company has incorrect information about them. They submit an access request under PIPEDA. The company must provide a copy of the personal information it holds about that person, explain how it is used, and identify any third parties it has been shared with.
This is educational information, not legal advice.