Cognenza
EN
Safety and good use · Level beginner

Your GDPR rights with AI: access, correct or delete data

What rights the GDPR gives you regarding ChatGPT, Gemini and other assistants, how to exercise them step by step and when to complain to the data protection authority. With official sources.

By Cognenza editorial team · Updated · 3 min read · Sources cited

Informational content; not a substitute for professional advice.

The rights you’ll use most

The rights you’ll use most
Right (GDPR)What it’s for with an AI assistant
Access (Art. 15)Find out what data the company holds about you and why.
Rectification (Art. 16)Correct inaccurate personal data, including in responses.
Erasure (Art. 17)Ask for your data to be deleted when the conditions are met.
Objection (Art. 21)Object to uses based on legitimate interest, such as improving models.
Portability (Art. 20)Receive your data in a reusable format.

Step by step

  1. Try the service’s settings. In ChatGPT you can export data and delete your account from settings (guide). In Gemini, manage and delete your activity (guide).
  2. If you need more, make a formal request through the company’s privacy channel. Say which right you’re exercising and what you want. This page’s prompt gives you a template.
  3. Keep a copy of the request and the date.
  4. If there’s no reply within a month, or it doesn’t satisfy you, you can complain to your data protection authority (in Spain, the AEPD).

Before sending anything

Don’t paste your ID or extra data into an AI chat to draft the letter: leave gaps and fill them in yourself. More in what data never to paste.

Frequently asked questions

Can I ask an AI to stop saying false things about me?

You can ask for inaccurate personal data to be corrected and object to its processing. Google, for example, offers “Report legal issue” under each Gemini response.

How long does the company have to reply?

Under Article 12(3) GDPR, one month from the request, extendable by two more months for complex cases, telling you why.

Glossary · Safety and good use

Keep reading

Sources

Official sources are linked in their original language.

  1. Reglamento (UE) 2016/679 (RGPD) — EUR-Lex
  2. Conoce tus derechos — Agencia Española de Protección de Datos
  3. Centro de Privacidad de las Aplicaciones de Gemini — Google
  4. Data controls in ChatGPT — OpenAI

Change log

  • : First published with the GDPR text on EUR-Lex and the AEPD rights guide.

Educational content, prepared with the help of AI tools, with sources cited. It is not a substitute for professional advice. Tools change fast: if you spot something out of date, write to us at contacto@cognenza.com. How we work.