CJEU Confirms Broad Scope of Right to Access Under GDPR
- 13/07/2023
- News
On 22 June 2023, the Court of Justice of the European Union (CJEU) delivered its judgment in Pankki S (C-579/21), which concerns the individual’s right to access their personal data under Article 15 of the General Data Protection Regulation (GDPR).
According to the CJEU, first, the right of access is characterized by the broad scope of information that must be provided to the individual. However, the scope of the right in question does not include every and all information, unless such information is essential for this individual’s interests. If such information includes personal data of others, their interests must be considered too. Furthermore, the right of access does not depend on the nature of the activities of an organization who processes the personal data (in the present case: a bank) or the status of an individual (here: its former employee). Finally, individuals can exercise their right of access even with regard to their personal data processed before the GDPR came into effect.
To read a short note on this topic, please click below.
