Published in Law360 | ''EU Decision Adds To Growing Right Of Access Case Law"
On June 22 this year, the Court of Justice of the European Union delivered its judgment in Pankki S. This concerns the individual's right to access their personal data under Article 15 of the GDPR. According to the ECJ:
1) The right of access is characterized by the broad scope of information that must be provided to the individual. However, the scope of the right in question does not include all information, unless essential to the individual's interests. If such information includes personal data of others, their interests must be considered too.
2) The right of access does not depend on the nature of the activities of an organization that processes the personal data — in the present case, a bank — or the status of an individual — here, its former employee.
3) What’s more, individuals can exercise their right of access even with regard to their personal data processed before the GDPR came into effect.
Read more in the full piece published by Law360, accessible to subscribers below: