According to Norton Rose Fulbright's Data Protection Report, Germany's Federal Court of Justice offered a ruling that widens the scope of data subject access requests under Article 15 of the EU General Data Protection Regulation. The decision, which stems from an appeal of rulings from two lower courts, outlines how Article 15 extends to information already known about the data subject, previous correspondence, and notes of internal processes or internal communications related to the data subject.
29 July 2021
German court broadens DSARs scope
Related stories
23andMe fined 2.31M GBP after UK, Canada data security probe
EU reaches provisional agreement to speed up cross-border GDPR enforcement
EU lawmakers announce deal on cross-border GDPR enforcement procedures
US officials question 23andMe's ability to navigate data protection during bankruptcy
Ontario's IPC works toward balancing youth safeguards, empowerment