Right of access (DSARs)
paid
–
4 min read
All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.
Luxembourg DPA fines Amazon Europe €746m
paid
–
2 min read
13 March 2026: Amazon with big win – a Luxembourg appeals court has overturned the €746 million fine and referred the case back to the DPA.
Access requests – in practice
paid
–
3 min read
Recommendations on how to deal with the Right of access – DSARs – in practice (with grumpy DSARs checklist).
EDPB press release: Right of access CEF 2024 report
paid
–
1 min read
30 DPAs participated in EDPB's 2024 CEF action on the Right of access, involving 1185 controllers. 7 identified challenges like lack of documented procedures and requesting excessive ID docs. And more awareness is needed.
noyb win: 🇳🇱 Dutch DPA fines Netflix €4.75m for lack of information
paid
–
1 min read
noyb gets their first big win in their streaming services complaint project, filed in January 2019 against Amazon Prime, Apple Music, DAZN, Flimmit, Netflix, SoundCloud, Spotify and YouTube. Unsurprisingly, Netflix has already objected.
Italy: bank fined €1m and rental company €250k for unclear DPAg and no legal basis
paid
–
4 min read
The 🇮🇹 Garante fined a bank €1 million for anti-fraud checks as a processor on behalf of a group company without a legal basis, breaching both Articles 28(3) and 5(1)(a). The rental company was separately fined €250,000, also for an insufficient privacy notice. Here are your key takeaways! 💡
EDPB Guidelines 1/2022 Right of access
paid
–
3 min read
A snapshot of the EDPB Guidelines dealing with DSARs: Brief overview, key points, and some advice for data protection pros.
