POTENTIAA founder's right to know: what Article 15 means for your diligence process
Article 15 gives any data subject the right to request confirmation of whether their personal data is being processed, and if so, to get access to it — including its source, purpose, and how long it will be kept. This applies whether or not the subject knew the processing was happening.
For informal diligence built from scattered notes, screenshots, and a private spreadsheet, a genuine Article 15 request is awkward in a specific way: answering it honestly means admitting the process existed, describing it after the fact, and reconstructing a source and purpose that was never written down to begin with.
A consent-based process answers this by design. The founder already knows what was requested, because they agreed to it and connected it themselves. There's no reconstruction needed — the record of what, when, and why already exists, because it was created at the moment of consent, not assembled defensively after a request arrives.
See how a consent-based check actually works.