{"answer_id":"praxikon:eu:gdpr:answer:informatieplicht","canonical_page":"https://www.praxikon.com/en/antwoord/avg/informatieplicht","query":"What information must an organisation provide when it collects personal data?","lang":"en","view":"full","mode":"gdpr","regime":"gdpr","topic":"informatieplicht","question":"What information must an organisation provide when it collects personal data?","label":"Information to provide when collecting data","answer":"Whoever collects data from the data subject provides, at that moment (Article 13(1) and (2)): the identity and contact details of the controller and of the data protection officer; the purposes and the legal basis; the legitimate interest where that is the legal basis; the recipients; an intended transfer outside the EEA with the safeguards; the storage period or the criteria for it; the rights of data subjects, including withdrawing consent; the right to lodge a complaint with the supervisory authority; whether providing the data is mandatory and what happens if someone does not; and the existence of automated decision-making with meaningful information about the logic involved. If the data do not come from the data subject, Article 14 applies, including the source of the data.","applied_to_question":null,"matched_terms":[],"articles":[{"article":13,"source_locator":"Art. 13(1) and (2) GDPR","point":"Information where data are collected from the data subject.","source_title":"GDPR (Regulation (EU) 2016/679)","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","human_page":"https://www.praxikon.com/en/avg/artikel/13"},{"article":14,"source_locator":"Art. 14(1), (2) and (3) GDPR","point":"Information where the data come from elsewhere.","source_title":"GDPR (Regulation (EU) 2016/679)","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","human_page":"https://www.praxikon.com/en/avg/artikel/14"},{"article":12,"source_locator":"Art. 12(1) GDPR","point":"Concise, transparent, intelligible and in clear and plain language.","source_title":"GDPR (Regulation (EU) 2016/679)","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","human_page":"https://www.praxikon.com/en/avg/artikel/12"}],"case_law":[],"guidance":[{"id":"wp29-wp260","kind":"guidance","title":"Guidelines on transparency under Regulation 2016/679","issuer":"Article 29 Working Party","reference":"WP260 rev.01","ecli":null,"date":"2018-04-11","status":"final","point":"Guidelines on transparency.","source_url":"https://ec.europa.eu/newsroom/article29/items/622227","human_page":null}],"enforcement":[],"open_questions":["Do the data come from the data subject or from another source?"],"human_page":"https://www.praxikon.com/en/avg/artikel/13","dataset":{"id":"praxikon-gdpr","source":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","known_at":"2026-09-15"},"casus_check":"https://www.praxikon.com/en/casus-check","disclaimer":"General interpretation, not legal advice. The official source remains authoritative.","methodology":"https://www.praxikon.com/en/methodologie"}