Individuals have rights under EU data protection law, including the right to access data, public administrations have to deal with these requests.
Public administrations have to respect the key principles of EU data protection law, including informing individuals.
Sanctions if a public administration doesn’t respect EU data protection law may include suspension of activity, warnings or fines.