Rights: Access (DSAR) - examples
members
–
40 min read
Right of access examples from the EDPB and ICO.
CJEU C-461/22 MK (Professional guardian) 11 Jul 2024
members
–
1 min read
A former legal guardian who acted in a professional capacity is a controller and must comply with the GDPR, including the right of access.
Right to object and right to erasure: insights from OSS decisions
members
–
2 min read
EDPB SPE project: Article 60 One-Stop-Shop thematic case digest analysing Articles 17 and 21. Key takeaway: Create, document, implement and control policies and procedures, including complaints management. PS: The 'data subject journey' is your secret weapon!
CJEU C-487/21 Österreichische Datenschutzbehörde v CRIF (right to copy) 4 May 2023
members
–
5 min read
You have the right to a faithful, intelligible copy of all your personal data, including full documents or extracts from documents or databases, if crucial for your rights and while respecting others' rights and freedoms.
CJEU C-579/21 Pankki S 22 Jun 2023
members
–
4 min read
You have the right of access processed before the GDPR took effect if you requested it after that date, and to know when and why it was accessed – but not by whom, unless crucial for your rights and while respecting others' rights and freedoms.
CJEU C-129/21 Proximus (subscribers' consent) 27 Oct 2022
members
–
3 min read
Consent is required to list subscribers' details in publicly available directories. If obtained, including on behalf of other controllers, a data subject can withdraw it (= an erasure request) from any of them, and each controller may need to inform the others.
CJEU LED C-118/22 Natsionalna politsia 30 Jan 2024
members
–
1 min read
Law Enforcement Directive: Police must regularly review if they can justify continue storing biometric and genetic data and, if this isn't the case, grant erasure requests.
Sweden Supreme Adm. Court: IMY's decision not to investigate or act on complaints can be appealed
members
–
3 min read
IMY's decisions 1) not to investigate a complaint further and 2) to close a supervisory case without action are appealable.
Norway Privacy Appeals Board requires the DPA to investigate lawfulness
members
–
2 min read
💡 A DPA cannot freely decide which cases to investigate or not.
CJEU C-307/22 Copies du dossier médical (Copies of medical records) 26 Oct 2023
members
–
1 min read
You have the right to a full copy of your medical journal, free of charge!