{"id":102905,"date":"2026-06-05T15:38:56","date_gmt":"2026-06-05T14:38:56","guid":{"rendered":"https:\/\/www.ictrechtswijzer.be\/?p=102905"},"modified":"2026-06-05T15:45:03","modified_gmt":"2026-06-05T14:45:03","slug":"request-for-access-to-a-copy-of-personal-data","status":"publish","type":"post","link":"https:\/\/www.ictrechtswijzer.be\/en\/inzageverzoek-kopie-persoonsgegevens\/","title":{"rendered":"Can an employer respond to a request for access by saying, \u201cCome view the documents here on-site\u201d?"},"content":{"rendered":"

An employee requests a copy of his own performance records based on his right of access. The employer does not explicitly refuse, but invites him to come view the documents on-site by appointment. Is that sufficient? In a decision dated May 6, 2026 (No. 97\/2026<\/a>) The Dispute Chamber of the Data Protection Authority (GBA) ruled otherwise: an invitation to view the documents at the office is not a valid response to a request for a copy, nor could the employer rely on the alleged excessive nature of the request.<\/p>\n\n\n\n

The facts<\/h3>\n\n\n\n

The complainant is a technician at a company. Starting on May 10, 2021, he repeatedly requested a copy of his timesheets for the period from May 10, 2016, to May 10, 2021\u2014handwritten weekly sheets detailing his travel, service calls, and hours worked. He wanted to verify whether the hours he had entered himself matched what his employer had ultimately recorded and paid.<\/p>\n\n\n\n

On that day, the employer provided him with a single form and, for the rest, referred him to a procedure: make an appointment, at least seven business days in advance, to review the forms on-site at the company\u2019s headquarters. The complainant repeated his request, including by registered letter on January 17, 2022, with explicit reference to the General Data Protection Regulation (GDPR)<\/a>. The employer stood by his position and never provided the requested copies.<\/p>\n\n\n\n

On July 27, 2023, the complainant filed a complaint with the GBA. Following an adversarial proceeding, a prima facie decision, and a hearing on the merits, the Dispute Resolution Chamber issued its decision.<\/p>\n\n\n\n

The ruling<\/h3>\n\n\n\n

The Dispute Chamber finds that the company has violated Articles 12.2, 12.3, 12.4, 15.1, and 15.3 of the GDPR, issues a reprimand, and orders the company to submit a copy of all performance records within one month. No fine. Three separate questions underpin that conclusion.<\/p>\n\n\n\n

Was the request for access clear enough?<\/h4>\n\n\n\n

The employer argued that the request was never specific enough to be acted upon. The Dispute Resolution Chamber rejects this argument. The very first request of May 10, 2021, could be interpreted as a request for access and a copy within the meaning of Articles 15.1 and 15.3 of the GDPR. The fact that the employer responded immediately by providing one corrected record and proposing a procedure demonstrates that it had understood the intent of the request. The subsequent request of January 17, 2022, formulated by counsel with reference to the GDPR, removed any remaining ambiguity.<\/p>\n\n\n\n

The Dispute Chamber concludes that the actual reason for the failure to respond was not a lack of clarity, but rather the workload the employer feared. Had there truly been any doubt regarding the scope, the employer would have been required to clarify it pursuant to its duty to facilitate under Article 12.2 of the GDPR.<\/p>\n\n\n\n

Could the employer have refused the request on the grounds that it was unreasonable?<\/h4>\n\n\n\n

The employer invoked the manifestly unfounded or excessive nature of the request (Article 12.5 of the GDPR), citing the significant workload involved: the files were organized by date rather than by employee and spread across dozens of folders. The Dispute Chamber rejected this argument. Article 12.5 of the GDPR is an exception that must be interpreted restrictively; the burden of proof rests with the data controller.<\/p>\n\n\n\n

She refers to the judgment Rottler Eyewear<\/a> (ECJ, March 19, 2026, C-526\/24 \u2013 See also our blog post about this ruling<\/a>): even an initial request can be excessive, but only in cases of proven abuse of rights, which requires both an objective and a subjective element. Neither of these conditions is met here. The records were created in the normal course of the employment relationship, and the request was intended precisely to verify the accuracy of the data. Referring to the judgment Austrian Data Protection Authority<\/a> (ECJ, January 9, 2025, C-416\/23) and the judgment FT<\/a> (ECJ, October 26, 2023, C-307\/22) The Dispute Chamber further confirms that the person concerned is not required to provide grounds for their request. The volume\u2014approximately 250 files, clearly identifiable\u2014was limited, and a mere workload resulting from the institution\u2019s own archiving system does not render a request excessive.<\/p>\n\n\n\n

Was an invitation to inspect the property on-site a valid response?<\/h4>\n\n\n\n

No. The request concerned the provision of a copy within the meaning of Article 15(3) of the GDPR, not temporary access. Referring to the judgment CRIF<\/a> (ECJ, May 4, 2023, C-487\/21) the Dispute Resolution Chamber reiterates that the right to a copy presupposes a faithful and intelligible reproduction of all data, in a form that the data subject can freely and permanently access. By requiring the complainant to come in person to identify and copy the files, the employer shifted a burden that rested with it onto the data subject, in violation of the duty to facilitate under Article 12(2) of the GDPR. Furthermore, the employer had never communicated a formal, reasoned refusal as required by Article 12.4 of the GDPR, nor had it invoked the extension of the deadline permitted by Article 12.3 of the GDPR.<\/p>\n\n\n\n

Legal analysis and interpretation<\/h3>\n\n\n\n

No general right to a copy of all documents<\/h4>\n\n\n\n

The crux of this decision lies in the distinction between viewing data and obtaining a copy of it. Since the CRIF<\/a>The judgment establishes that Article 15(3) of the GDPR is not an autonomous right, but rather the procedure by which the right of access is exercised. In this regard, it is important to emphasize what that judgment does not say: it does not grant a general right to a copy of complete documents. The data subject has the right to an accurate and comprehensible reproduction of their personal data; the provision of extracts or even complete documents is only mandatory to the extent that it is indispensable for the data subject to effectively exercise their rights.<\/p>\n\n\n\n

This necessity test explains why, in many cases, a data controller may simply provide a list of the personal data being processed. The Administrative Law Division of the Dutch Council of State has established in its case law that providing a copy of the document containing the personal data is not always necessary, as long as the chosen format achieves the supervisory objective of Article 15(3) of the GDPR (ECLI:NL:RVS:2020:2559<\/a>). The Paris Court of Appeal took this reasoning even further: an employee cannot invoke the right of access to compel the release of a complete copy of their work email account if the disclosure of those documents is not essential (CA Paris (P\u00f4le 6, ch. 2) December 18, 2025, No. 25\/04270<\/a>).<\/p>\n\n\n\n

Against this backdrop, this decision is not a departure from precedent, but rather an application of the same standard to facts that represent the opposite extreme. The Dispute Chamber correctly finds that only the handwritten source documents allowed the complainant to verify the recording of his hours, so that their provision was indeed indispensable in this case. A mere on-site consultation or a computerized overview was not sufficient, precisely because those source documents were the very subject of the audit.<\/p>\n\n\n\n

The same standard, but a different outcome than in the banking case<\/h4>\n\n\n\n

The fact that the indispensability test works both ways is evident from a comparison with an earlier decision by the Dispute Resolution Chamber. In its decision 08\/2026 of January 26, 2026, a bank had responded to a request for access with an overview of the processed personal data, but refused to provide copies of the account opening agreements. There, too, the Dispute Chamber applied the CRIF logic: in principle, an overview is sufficient, unless the source document is indispensable for verifying the lawfulness of the processing\u2014which was the case with a contract that itself constitutes the basis for processing. We discussed that decision in detail earlier in our article on whether you are required to provide and retain copies of contracts<\/a>. The parallel is illuminating: it is not the nature of the document that is decisive, but whether the person concerned can effectively exercise their right of inspection without that document.<\/p>\n\n\n\n

In practice, this means that the principle \u201cwhoever requests a copy receives a copy\u201d must be qualified. The correct starting point is that the data controller is obligated to provide a faithful reproduction of the personal data, and the source documents only in addition to that when they are indispensable. The fact that the Dispute Chamber decided in this case6 to order the release of all files is therefore not automatic, but rather the result of the special evidentiary function of those files.<\/p>\n\n\n\n

Workload as a defense: judged strictly, but not irrelevant<\/h4>\n\n\n\n

It is striking how the Dispute Chamber considers the workload twice, and in different ways. When assessing whether the workload is excessive, it does not take this into account: referring to EDPB Guidelines 01\/2022<\/a> The Dispute Resolution Chamber confirms that time and effort alone do not render a request unreasonable, especially when the burden arises from a self-chosen method of archiving. The right of access is not subject to a general proportionality requirement.<\/p>\n\n\n\n

However, when selecting the corrective measure, that same workload resurfaces, this time to the employer\u2019s advantage: according to the Dispute Resolution Chamber, an administrative fine on top of a compliance order would be disproportionate, given the internal resources that enforcement will already require. This is a defensible, but not self-evident, line of reasoning. A circumstance that is irrelevant to the existence of the infringement thus becomes relevant to the sanction. It demonstrates that the proportionality test in selecting a sanction is broader than the strict test under Article 12.5 of the GDPR.<\/p>\n\n\n\n

We adopted Rottler's glasses, but used them upside down<\/h4>\n\n\n\n

It is interesting to note that the Dispute Resolution Chamber cites the very recent Brillen Rottler ruling\u2014a decision in which the Court of Justice opens the door to refusing even an initial request for access on grounds of abuse. While that ruling is generally interpreted as strengthening the position of the data controller, the Dispute Chamber uses it here precisely to underscore the strict burden of proof. The abuse criterion requires both an objective and a subjective element, and the mere fear of a future claim is not sufficient. The decision illustrates that Brillen Rottler is not a free pass: it shifts the discussion to the data subject\u2019s intent, an element that the controller must demonstrate unequivocally.<\/p>\n\n\n\n

Specifically, what does this mean?<\/h3>\n\n\n\n

For employers and other data controllers.<\/strong> Responding to a request for access with an invitation to consult the data on-site is not a safe course of action. Anyone who is unable or unwilling to provide a copy within one month has clear alternatives provided by the GDPR itself: extend the response period by two months, provided that a reasoned notification is issued within one month (Article 12.3 GDPR), issue a formally reasoned refusal stating the right to lodge a complaint (Article 12.4 GDPR), or invoke the rights of third parties (Article 15.4 GDPR). Doing nothing or shifting the burden to the data subject is the only option that is certain to lead to a violation. Anyone wishing to invoke the ground of disproportionate burden would be well advised to do so in a timely and reasoned manner\u2014not only during the proceedings before the Dispute Chamber.<\/p>\n\n\n\n

Please note the information provided by third parties.<\/strong> The performance reports also contain customer data. The Dispute Resolution Board points out that simply allowing the complainant to view the files would expose them to third-party personal data, in violation of Article 15.4 of the GDPR. It is precisely the controller\u2019s responsibility to redact the relevant documents in advance and, where necessary, to anonymize third-party data\u2014not to shift that responsibility onto the data subject. Anyone providing a copy should therefore consider targeted anonymization in advance.<\/p>\n\n\n\n

For employees and other stakeholders.<\/strong> The right of access is a powerful tool, even in an employment context and even when a dispute is ongoing. You do not need to justify your request, and the employer cannot require you to review the documents only on-site. Submit your request in writing, stating that you wish to receive a copy pursuant to Article 15.3 of the GDPR, specify the time period and the documents in question, and keep a record of your correspondence\u2014which serves as proof of both the date and the clarity of your request.<\/p>\n\n\n\n

Frequently asked questions (FAQ)<\/h3>\n\n\n\n

Can my employer refuse to provide a copy because it\u2019s too much work?<\/strong>
As a general rule, no. The fact that locating and copying documents takes time and effort does not, in and of itself, make a request for access excessive within the meaning of Article 12.5 of the GDPR, especially not when that burden results from the way the employer has organized its own files. A request may be refused only in cases of proven abuse of rights, and the burden of proof in this regard rests heavily with the employer.<\/p>\n\n\n\n

Do I need to explain why I\u2019m requesting my personal data?<\/strong>
No. The Court of Justice has repeatedly ruled that a data subject is not required to provide a reason for their request for access. Even if you wish to use the data for another purpose\u2014for example, a dispute with your employer\u2014the right to receive an initial copy remains intact.<\/p>\n\n\n\n

Is it sufficient for me to be allowed to review the documents on site?<\/strong>
No, unless you have specifically requested a copy. The right to a copy means that you are entitled to receive an accurate reproduction of your data in a format that you can freely and permanently access. A mere invitation to view the data at the office does not satisfy that request.<\/p>\n\n\n\n

Conclusion<\/h3>\n\n\n\n

The decision reaffirms a simple yet often overlooked principle: anyone who requests a copy of their personal data is entitled to a copy\u2014not to an invitation to visit in person. The workload involved in processing the data and the manner in which documents are stored are the responsibility of the data controller, not the data subject. At the same time, the case demonstrates that an employer does have valid options available, provided that they are exercised in a timely manner and with proper justification.<\/p>\n\n\n\n

\n\n\n\n
\n
Are you, as an employer or an employee, facing a request for access to personal data or a dispute regarding the right to a copy of personal data? Our attorneys specializing in privacy law and data protection would be happy to review your case and help you take the appropriate steps. Feel free to contact us for an initial consultation.<\/a><\/div>\n<\/div>\n\n\n\n

<\/p>\n\n\n\n

<\/p>","protected":false},"excerpt":{"rendered":"

Een werknemer vraagt een kopie van zijn eigen prestatiefiches op grond van zijn inzagerecht. De werkgever weigert niet uitdrukkelijk, maar nodigt hem uit om de documenten ter plaatse in te komen kijken, op afspraak. Volstaat dat? In een beslissing van 6 mei 2026 (nr. 97\/2026) oordeelt de Geschillenkamer van de Gegevensbeschermingsautoriteit (GBA) van niet: een […]<\/p>\n","protected":false},"author":1,"featured_media":102907,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[61],"tags":[],"class_list":["post-102905","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gdpr"],"yoast_head":"\nInzageverzoek: recht op kopie of inzage ter plaatse? | ICT Rechtswijzer<\/title>\n<meta name=\"description\" content=\"Mag een werkgever een inzageverzoek beantwoorden met inzage ter plaatse in plaats van een kopie? De GBA zegt neen. Lees wat dit voor u betekent.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ictrechtswijzer.be\/en\/request-for-access-to-a-copy-of-personal-data\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mag een werkgever een inzageverzoek beantwoorden met "kom de stukken hier ter plaatse inkijken"?\" \/>\n<meta property=\"og:description\" content=\"Mag een werkgever een inzageverzoek beantwoorden met inzage ter plaatse in plaats van een kopie? De GBA zegt neen. Lees wat dit voor u betekent.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ictrechtswijzer.be\/en\/request-for-access-to-a-copy-of-personal-data\/\" \/>\n<meta property=\"og:site_name\" content=\"ICT Rechtswijzer Advocaat\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-05T14:38:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-05T14:45:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2026\/06\/pexels-2157750954-34938441-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1920\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Joris Deene\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joris Deene\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/\"},\"author\":{\"name\":\"Joris Deene\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/person\\\/29025dc007e8d33a89422580a534d685\"},\"headline\":\"Mag een werkgever een inzageverzoek beantwoorden met “kom de stukken hier ter plaatse inkijken”?\",\"datePublished\":\"2026-06-05T14:38:56+00:00\",\"dateModified\":\"2026-06-05T14:45:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/\"},\"wordCount\":2119,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/pexels-2157750954-34938441-scaled.jpg\",\"articleSection\":[\"GDPR - AVG\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/\",\"name\":\"Inzageverzoek: recht op kopie of inzage ter plaatse? | ICT Rechtswijzer\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/pexels-2157750954-34938441-scaled.jpg\",\"datePublished\":\"2026-06-05T14:38:56+00:00\",\"dateModified\":\"2026-06-05T14:45:03+00:00\",\"description\":\"Mag een werkgever een inzageverzoek beantwoorden met inzage ter plaatse in plaats van een kopie? De GBA zegt neen. Lees wat dit voor u betekent.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/pexels-2157750954-34938441-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/pexels-2157750954-34938441-scaled.jpg\",\"width\":2560,\"height\":1920},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/inzageverzoek-kopie-persoonsgegevens\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mag een werkgever een inzageverzoek beantwoorden met “kom de stukken hier ter plaatse inkijken”?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#website\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\",\"name\":\"ICT Rechtswijzer Advocaat\",\"description\":\"Advocaten in IP, AI, IT, privacy & media\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Organization\",\"LegalService\"],\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\",\"name\":\"ICT Rechtswijzer\",\"alternateName\":\"ICT Rechtswijzer, kennisplatform van Everest Advocaten\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg\",\"width\":638,\"height\":479,\"caption\":\"ICT Rechtswijzer\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/be.linkedin.com\\\/company\\\/everest-law\",\"https:\\\/\\\/www.everest-law.eu\\\/\"],\"description\":\"Kennisplatform van het departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht van Everest Advocaten, onder leiding van mr. Joris Deene.\",\"parentOrganization\":{\"@type\":\"LegalService\",\"name\":\"Everest Advocaten\",\"url\":\"https:\\\/\\\/www.everest-law.eu\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Bollebergen 2A bus 20\",\"postalCode\":\"9052\",\"addressLocality\":\"Gent\",\"addressCountry\":\"BE\"}}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/person\\\/29025dc007e8d33a89422580a534d685\",\"name\":\"Joris Deene\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"caption\":\"Joris Deene\"},\"description\":\"Mr. Joris Deene is advocaat-partner bij Everest Advocaten en leidt het departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht. ICT Rechtswijzer is het kennisplatform van dat departement. Joris publiceert en doceert over auteursrecht, merkenrecht, softwarerecht, de AVG, de AI-Act, de DSA en het mediarecht.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/joris-deene-5144096\\\/\"],\"honorificPrefix\":\"Mr.\",\"knowsAbout\":[\"intellectuele eigendom\",\"auteursrecht\",\"merkenrecht\",\"IT-recht\",\"AI-recht\",\"gegevensbescherming\",\"AVG\",\"mediarecht\",\"digitaledienstenverordening\",\"AI-verordening\"],\"knowsLanguage\":[\"Nederlands\",\"Engels\",\"Frans\"],\"jobTitle\":\"Advocaat-partner, hoofd departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht\",\"worksFor\":\"Everest Advocaten\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/en\\\/author\\\/joris-deene\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Request for access: right to a copy or on-site access? | ICT Legal Guide","description":"Can an employer respond to a request for access by allowing on-site access instead of providing a copy? The GBA says no. Find out what this means for you.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ictrechtswijzer.be\/en\/request-for-access-to-a-copy-of-personal-data\/","og_locale":"en_US","og_type":"article","og_title":"Mag een werkgever een inzageverzoek beantwoorden met \"kom de stukken hier ter plaatse inkijken\"?","og_description":"Mag een werkgever een inzageverzoek beantwoorden met inzage ter plaatse in plaats van een kopie? De GBA zegt neen. Lees wat dit voor u betekent.","og_url":"https:\/\/www.ictrechtswijzer.be\/en\/request-for-access-to-a-copy-of-personal-data\/","og_site_name":"ICT Rechtswijzer Advocaat","article_published_time":"2026-06-05T14:38:56+00:00","article_modified_time":"2026-06-05T14:45:03+00:00","og_image":[{"width":2560,"height":1920,"url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2026\/06\/pexels-2157750954-34938441-scaled.jpg","type":"image\/jpeg"}],"author":"Joris Deene","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Joris Deene","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/#article","isPartOf":{"@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/"},"author":{"name":"Joris Deene","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/person\/29025dc007e8d33a89422580a534d685"},"headline":"Mag een werkgever een inzageverzoek beantwoorden met “kom de stukken hier ter plaatse inkijken”?","datePublished":"2026-06-05T14:38:56+00:00","dateModified":"2026-06-05T14:45:03+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/"},"wordCount":2119,"publisher":{"@id":"https:\/\/www.ictrechtswijzer.be\/#organization"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2026\/06\/pexels-2157750954-34938441-scaled.jpg","articleSection":["GDPR - AVG"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/","url":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/","name":"Request for access: right to a copy or on-site access? | ICT Legal Guide","isPartOf":{"@id":"https:\/\/www.ictrechtswijzer.be\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/#primaryimage"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2026\/06\/pexels-2157750954-34938441-scaled.jpg","datePublished":"2026-06-05T14:38:56+00:00","dateModified":"2026-06-05T14:45:03+00:00","description":"Can an employer respond to a request for access by allowing on-site access instead of providing a copy? The GBA says no. Find out what this means for you.","breadcrumb":{"@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/#primaryimage","url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2026\/06\/pexels-2157750954-34938441-scaled.jpg","contentUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2026\/06\/pexels-2157750954-34938441-scaled.jpg","width":2560,"height":1920},{"@type":"BreadcrumbList","@id":"https:\/\/www.ictrechtswijzer.be\/inzageverzoek-kopie-persoonsgegevens\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ictrechtswijzer.be\/"},{"@type":"ListItem","position":2,"name":"Mag een werkgever een inzageverzoek beantwoorden met “kom de stukken hier ter plaatse inkijken”?"}]},{"@type":"WebSite","@id":"https:\/\/www.ictrechtswijzer.be\/#website","url":"https:\/\/www.ictrechtswijzer.be\/","name":"ICT Lawyer","description":"Lawyers in IP, AI, IT, privacy & media","publisher":{"@id":"https:\/\/www.ictrechtswijzer.be\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ictrechtswijzer.be\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Organization","LegalService"],"@id":"https:\/\/www.ictrechtswijzer.be\/#organization","name":"ICT Legal Guide","alternateName":"ICT Rechtswijzer, kennisplatform van Everest Advocaten","url":"https:\/\/www.ictrechtswijzer.be\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/logo\/image\/","url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2018\/08\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg","contentUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2018\/08\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg","width":638,"height":479,"caption":"ICT Rechtswijzer"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/be.linkedin.com\/company\/everest-law","https:\/\/www.everest-law.eu\/"],"description":"Knowledge platform of the Intellectual Property, IT Law, AI Law, Data Protection, and Media Law department at Everest Advocaten, led by Joris Deene, Esq.","parentOrganization":{"@type":"LegalService","name":"Everest Advocaten","url":"https:\/\/www.everest-law.eu","address":{"@type":"PostalAddress","streetAddress":"Bollebergen 2A bus 20","postalCode":"9052","addressLocality":"Gent","addressCountry":"BE"}}},{"@type":"Person","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/person\/29025dc007e8d33a89422580a534d685","name":"Joris Deene","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","caption":"Joris Deene"},"description":"Mr. Joris Deene is a partner at Everest Attorneys and heads the department of intellectual property, IT law, AI law, data protection, and media law. ICT Legal Guide is that department\u2019s knowledge platform. Joris publishes and teaches on copyright law, trademark law, software law, the GDPR, the AI Act, the DSA, and media law.","sameAs":["https:\/\/www.linkedin.com\/in\/joris-deene-5144096\/"],"honorificPrefix":"Mr.","knowsAbout":["intellectuele eigendom","auteursrecht","merkenrecht","IT-recht","AI-recht","gegevensbescherming","AVG","mediarecht","digitaledienstenverordening","AI-verordening"],"knowsLanguage":["Nederlands","Engels","Frans"],"jobTitle":"Advocaat-partner, hoofd departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht","worksFor":"Everest Advocaten","url":"https:\/\/www.ictrechtswijzer.be\/en\/author\/joris-deene\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts\/102905","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/comments?post=102905"}],"version-history":[{"count":0,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts\/102905\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/media\/102907"}],"wp:attachment":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/media?parent=102905"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/categories?post=102905"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/tags?post=102905"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}