(63) Every individual should have the right to access the data collected concerning him or her, and should be able to easily exercise this right at reasonable intervals to be aware of the processing and be able to verify the lawfulness of the processing. This includes data subjects' right of access to data concerning their health, for example, data in medical records containing information such as diagnoses, test results, assessments by attending physicians, therapies used or treatments performed. Therefore, every data subject should have the right to knowledge and information, in particular regarding the purposes for which personal data are processed, if possible the period for which personal data are processed, the recipients of personal data, the assumptions of possible automated processing of personal data and, at least in the case of profiling, the consequences of such processing. To the extent possible, the controller should be able to grant remote access to a secure system that provides the data subject with direct access to his or her personal data. This right should not adversely affect the rights or freedoms of others, including trade secrets or intellectual property, particularly copyrights protecting software. However, these considerations should not result in denying the data subject any information. If a controller processes large amounts of information about a data subject, the controller should be able to request, before providing the information, that the data subject specify the information or processing activities to which the request relates.