A request for access to personal data may be considered excessive, and therefore abusive, and be refused if it is made for the sole purpose of seeking compensation for an alleged breach of the ‘GDPR’ Regulation, the Court of Justice of the European Union ruled in a judgment handed down on Thursday 19 March (Case C-526/24).
In Germany, the optical company Brillen Rottler is refusing to give an individual living in Austria access to his personal data entered in a form available on the...