Article 17
Responsibility
- Where two or more controllers are processing personal data jointly, the data subject may exercise his or her right of access in relation to any one of them.
- If the request relates to data that is being processed by one processor, the processor shall assist the controller in providing the information where it does not answer the request on behalf of the controller.