Request by data subject for access to their personal data; must be handled per GDPR (e.g., 1 month).
Patient requests copy of ICSR data—provide in readable form where lawful.
GDPR Art 15