rights - DPO Hub (Page 2)

CJEU C-579/21 Pankki S

members – 4 min read

You have the right of access to data processed before the GDPR took effect, if you requested it after that date, and to know when and why it was accessed—but not by whom, unless crucial for your rights and while respecting others' rights and freedoms.

May 27, 2024

CJEU C-129/21 Proximus (subscribers' consent)

members – 3 min read

Consent is required for listing subscribers' details in publicly available directories. If you obtain it, including on behalf of other controllers, a data subject can withdraw it (which equates to an erasure request) from any of these, and every controller may be required to notify the others.

Apr 28, 2024

CJEU C-118/22 Natsionalna politsia

members –

Police must regularly review if they can justify to continue storing biometric and genetic data and, if this isn't the case, grant erasure requests. This ruling applies to Directive (EU) 2016/680 (LED).

Jan 31, 2024