Data subjects can request confirmation if their personal data is processed, and can obtain a copy along with details?such as processing purpose, recipients, retention time, and rights. Banks must respond within one month, and must provide a meaningful, intelligible dataset.
