3 Matching Annotations
  1. Nov 2023
  2. Apr 2023
    1. Given the broad aim of the right of access, the aim of the right of access is notsuitable to be analysed as a precondition for the exercise of the right of accessby the controller as part of its assessment of access requests. Thus, controllersshould not assess “why” the data subject is requesting access, but only “what”the data subject is requesting (see section 3 on the analysis of the request) andwhether they hold personal data relating to that individual (see section 4).Therefore, for example, the controller should not deny access on the groundsor the suspicion that the requested data could be used by the data subject todefend themselves in court in the event of a dismissal or a commercial disputewith the controller9.

      This is very interesting, and the FT (Copies du dossier médical) case will be one to watch.

      Details: https://www.dpcuria.eu/details?reference=C-307/22