In a ruling handed down on Thursday 22 June (Case C-579/21), the Court of Justice of the EU ruled that anyone can find out when and why their personal data has been consulted, regardless of the activity carried out by the controller - in this case, a bank - and their relationship with the controller.
A customer and employee of the Pankki S bank learned that his personal data had been consulted on several occasions by members of staff. He then asked his bank to provide him with the...