The Greek Data Protection Authority imposed a EUR 100,000 fine on a service company
The right of access cannot be frustrated by the automatic deletion of an employee’s business data where those data may matter to the employee’s legal claims. The full text of the decision in the Judykatura database shows how the premature deletion of email, an incomplete response and an unjustified extension combined to produce GDPR infringements. The Greek Data Protection Authority found that the company had failed to provide a former employee with effective access to his personal data.
The rest of this analysis, all theses and the full text of the ruling are available with an AKTUALNOŚCI PLUS subscription.
Find out how EU supervisory authorities, administrative and civil courts and the CJEU reason their decisions — and keep your organisation aligned with current case law.