Important developments in the right of access to personal data

18 January 2024   /  Ewa Knapińska  /  News

The past year has seen a lot of developments in the context of the right of access to personal data, especially in light of the rulings of the Court of Justice of the European Union on this issue.

 

One of the hot topics in this area was the issue of informing a subject who exercises the right to access his or her data about the recipients of that personal data. In the current reality, it is difficult to imagine processing personal data without sharing it with third parties, such as hosting providers, providers of other IT services or courier companies.

 

Pursuant to Article 15(1) of the General Data Protection Regulation (GDPR), the data controller is obliged to grant access to the processed personal data to the data subject if he or she makes such a request. As part of the right of access, the data subject has the right to obtain information about, among other things, the recipients or categories of recipients of his personal data.

 

Data controllers sometimes face challenges regarding the proper implementation of this obligation. Is it necessary to provide information about the identity of specific data recipients, such as the names of specific hosting providers, or is it sufficient to indicate the categories of data recipients?

 

Ewa Knapinska of our Team looked at this issue in the latest issue @ “ABI Expert”. In her article “Right of access vs. data recipients,” Ewa discusses, among other things, the CJEU’s January 12, 2023 ruling in Case C-154/21 regarding this issue, as well as the updated version of the European Data Protection Board’s 1/2022 guidelines on the implementation of the right of access.

 

#RODO #DataProtection #RightofAccess #TSUE #ABIExpert

 

Link to full article:

Październik – Grudzień 2023

Share

Author: Ewa Knapińska

Share

Need help with this topic?

Write to our expert

Ewa Knapińska

Manager, Attorney at law

+48 531 201 991 Contact

Articles in this category

MiCA does not cover DeFi. What does this mean for the crypto asset market in the EU?

Articles

More
MiCA does not cover DeFi. What does this mean for the crypto asset market in the EU?

AI gigafactory in Poland – a groundbreaking investment in artificial intelligence

AI

More
AI gigafactory in Poland – a groundbreaking investment in artificial intelligence

Liability for damage caused by autonomous vehicles – who is legally responsible?

Articles

More
Liability for damage caused by autonomous vehicles – who is legally responsible?

Jacek Cieśliński in Puls Biznesu on the correct labelling of promotions

Articles

More
Jacek Cieśliński in Puls Biznesu on the correct labelling of promotions

Green lies, real consequences – greenwashing in the light of the law

Articles

More
Green lies, real consequences – greenwashing in the light of the law
More

Contact

Any questions?see phone number+48 663 683 888
see email address

Hey, have you
signed up to our newsletter yet?

    Check how we process your personal data here