Topic: Subject access request

Noyb launches cookie identification complaint project

The Vienna-based NGO has filed a series of complaints against websites and data brokers that it claims inadequately responded to access requests that identified individuals based on cookies placed on the individuals’ devices.

28 February 2023

Belgian court overturns regulator’s decision in employment dispute

A Belgian appeals court has struck down a fine issued by the data regulator against a company director who processed an ex-employee’s data in a legal dispute against him.

20 February 2023

Credit broker told to delete unlawfully collected data

The Austrian data regulator has told a credit broker to delete personal data it unlawfully collected from individuals who filed access requests with the company.

13 February 2023

Finnish court sends questions about oral disclosure of data to ECJ

A Finnish court has referred questions on the scope of processing in the context of oral disclosures of data and the possibility of harmonising the right of access.

17 January 2023

Another ICO SAR decision appeal fails

A claimant’s case against the UK data regulator’s decisions on two subject access request complaints has failed, confirming the limits of the scope of section 166.

13 January 2023

Debt collector earns Finland’s biggest GDPR fine

Finland’s regulator has imposed its largest-ever data protection fine on a debt collection company that repeatedly failed to engage with its investigation.

13 January 2023

ECJ confirms broad scope of access rights

The European Court of Justice has confirmed controllers must reveal the specific recipients of any data they shared in their responses to access requests, unless it is impossible or excessive to do so.

12 January 2023

ECJ does not resolve GDPR clash between courts and regulators

The EU’s highest court has said member states must ensure that potentially contradictory civil and data protection authority decisions do not water down individuals’ rights.

12 January 2023

ECJ advisers clarify scope of access rights

ECJ advisers have said in separate cases that subject access rights mostly do not entitle individuals to obtain copies of documents containing personal data, and that individuals can request information about processing that occurred before the GDPR came into effect.

15 December 2022

Danish regulator criticises law firm

Denmark’s privacy regulator has criticised law firm Bech-Bruun’s handling of information access relevant to an ongoing legal investigation, but found its processing lawful overall.

09 December 2022

Unlock unlimited access to all Global Data Review content