Logo RGPD
RGPD.click
/
  1. Home
  2. Resources
  3. Fiches
  4. Right to Information & Transparency (Art. 13 & 14)
Courses Guides Blog Resources News
Français English Nederlands
Fiche 32/54 Part 4 — Data Subject Rights Intermediate Reviewed 2026-08-23

Right to Information & Transparency (Art. 13 & 14)

Articles 13 and 14 mandate proactive transparency: providing clear information upon direct collection (Art. 13) or within one month for indirect collection (Art. 14). Transparency is a standalone obli

Open in interactive reader
⚖️ Proactive Transparency 📋 Art. 13 & 14 Disclosures

Right to Information & Transparency (Art. 13 & 14)

⚡ In 30 seconds

Transparency enables data subjects to maintain control. Article 13 applies when personal data is collected directly from the individual (mandatory immediate notice). Article 14 applies when personal data is acquired from third parties or brokers (notice due within one month at the latest).

Mandatory Information Direct Collection (Art. 13) Indirect Collection (Art. 14)
Identity & Contact Controller, DPO, and EU representative details. Controller, DPO, and EU representative details.
Purpose & Legal Basis Purposes, exact Article 6 ground, and legitimate interest details. Purposes, Article 6 ground, and legitimate interest details.
Data Categories & Origin Known implicitly (provided by user). Mandatory: Categories of data and third-party source origin.
Recipients & Transfers Categories of recipients and non-EU transfer mechanisms (SCCs). Categories of recipients and non-EU transfer mechanisms (SCCs).
Retention Periods Specific retention period or criteria used to determine it. Specific retention period or criteria used to determine it.
Rights & Complaint All Chapter III rights, withdrawal rights, and DPA complaint right. All Chapter III rights, withdrawal rights, and DPA complaint right.
⚡ Key Takeaways
  • Transparency is an ongoing obligation: substantive changes require updated notices to users.
  • Exemptions under Article 14(5): provision of info proves impossible or disproportionate effort.
  • Layered notices (short card + detailed full view) are the gold standard endorsed by the EDPB.
⚠️ Common Pitfall

Using passive vague catch-all phrases like 'we may share data with select business partners' without naming categories.

🛠️ In Practice

Display contextual micro-notices directly adjacent to web forms at the precise point of input.

⚖️ Official Sources: Art. 13 & 14 GDPR · Recitals 60–62 · WP29 Guidelines on Transparency (WP260) ✓ Legal review: 23 August 2026

✓ Key takeaways

  • Direct collection (Art. 13): information must be provided at the very moment data is obtained.
  • Indirect collection (Art. 14): maximum deadline of one month, or upon first communication.
  • Information notices must be easily accessible, understandable, and free of legal jargon.

⚠ Common pitfall: Conflating the informational transparency notice with obtaining consent; transparency is mandatory regardless of legal ground.

→ Actionable practice: Adopt a multi-layered privacy policy: a high-level summary tier and an expandable tier with full legal specifications.

← General Modalities for the Exercise of Rights (Art. 12) Right of Access & The Notion of Copy (Art. 15) →