GDPR Arts. 15–17 and 21: data subject rights against trained models

Access, rectification, erasure and objection requests reach every place the data lives: corpus, snapshots, retrieval index, logs and, where it holds personal data, the model

By Jorge García Aibar Reviewed 2026-09-24

Text alternative

Clause: GDPR, Arts. 15–17 and 21.
Duty holder: Controller.
Applies from: 2018-05-25, In force.
Artefact: Request workflow across corpus,….
Layers: Layer 04, Layer 05.
Evidence record: Evidence record v1.
Record schema: Evidence record.
No crosswalk topic files this clause yet.

When this obligation applies The first date in the row's status, then each later step: filled once its date has passed, outlined while it is still ahead of the review date.

Data table: the dates

Dates of AIGE-OBL-GDPR-ART15-17-21
Date	Step	Detail
2018-05-25	In force

Id: AIGE-OBL-GDPR-ART15-17-21
Instrument: General Data Protection Regulation (EU) 2016/679 law
Clause: Arts. 15–17 and 21
In scope: Controller
Authority: National data protection authority
Applies from: 2018-05-25 In force

The artefact that evidences it

Request workflow across corpus, snapshots, retrieval index, logs and weights; fulfilment record.

Patterns that build it

Rights Requests Against Models (layer 2 and 5)

Open controls that evidence it

Draft controls in the open control profiles that map to this row: each states a requirement and the evidence it must leave behind.

AIGE-CTL-DATA-011 Rights Changes Propagated to Affected Models (Data admission and privacy profile)

Source

Chapter 08, section The GDPR, checked against its sources on the review date above.

Machine-readable

This obligation: /api/v1/obligations/aige-obl-gdpr-art15-17-21.json
The register: /api/v1/obligations.json · CSV
Schema and stability promise: open data and API

Cite this obligation

García Aibar, J. (2026). GDPR Arts. 15–17 and 21: data subject rights against trained models (AIGE-OBL-GDPR-ART15-17-21). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-gdpr-art15-17-21. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{GDPR Arts. 15–17 and 21: data subject rights against trained models (AIGE-OBL-GDPR-ART15-17-21)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-gdpr-art15-17-21},
  note         = {Version 0.5.0}
}