rights - DPO Hub (Page 2)

CJEU C-154/21 RW v Österreichische Post (Information on recipients of personal data) 12 Jan 2023

members – 3 min read

You have the right to know the actual identities of the recipients your personal data has been shared with.

Aug 16, 2024

EDPB Guidelines 1/2022 Right of access

members – 3 min read

A snapshot of the EDPB Guidelines dealing with DSARs: Brief overview, key points, and some advice for data protection pros.

Jul 19, 2024

Rights: Access (DSAR) - examples

members – 40 min read

Right of access examples from the EDPB and ICO.

Jul 17, 2024

CJEU C-461/22 MK (Professional guardian) 11 Jul 2024

members – 1 min read

A former legal guardian who acted in a professional capacity is a controller and must comply with the GDPR, including the right of access.

Jul 14, 2024

Right to object and right to erasure: insights from OSS decisions

members – 2 min read

EDPB SPE project: Article 60 One-Stop-Shop thematic case digest analysing Articles 17 and 21. Key takeaway: Create, document, implement and control policies and procedures, including complaints management. PS: The 'data subject journey' is your secret weapon!

Jul 9, 2024

CJEU C-487/21 Österreichische Datenschutzbehörde v CRIF (right to copy) 4 May 2023

members – 5 min read

You have the right to a faithful, intelligible copy of all your personal data, including full documents or extracts from documents or databases, if crucial for your rights and while respecting others' rights and freedoms.

Jun 14, 2024

CJEU C-579/21 Pankki S 22 Jun 2023

members – 4 min read

You have the right of access processed before the GDPR took effect if you requested it after that date, and to know when and why it was accessed – but not by whom, unless crucial for your rights and while respecting others' rights and freedoms.

May 27, 2024

CJEU C-129/21 Proximus (subscribers' consent) 27 Oct 2022

members – 3 min read

Consent is required to list subscribers' details in publicly available directories. If obtained, including on behalf of other controllers, a data subject can withdraw it (= an erasure request) from any of them, and each controller may need to inform the others.

Apr 28, 2024

CJEU LED C-118/22 Natsionalna politsia 30 Jan 2024

members – 1 min read

Law Enforcement Directive: Police must regularly review if they can justify continue storing biometric and genetic data and, if this isn't the case, grant erasure requests.

Jan 31, 2024

Sweden Supreme Adm. Court: IMY's decision not to investigate or act on complaints can be appealed

members – 3 min read

IMY's decisions 1) not to investigate a complaint further and 2) to close a supervisory case without action are appealable.

Nov 20, 2023

Norway Privacy Appeals Board requires the DPA to investigate lawfulness

members – 2 min read

💡 A DPA cannot freely decide which cases to investigate or not.

Nov 13, 2023

CJEU C-307/22 Copies du dossier médical (Copies of medical records) 26 Oct 2023

members – 1 min read

You have the right to a full copy of your medical journal, free of charge!

Nov 6, 2023