The rights of access have been expanded and now also include information on the legal basis and storage duration of data processing. Companies must also be able to hand over data in a portable and secure format.