Supreme Administrative Court held that a copy must identify data sent to a debt collector
The right of access is not satisfied by providing the data subject with the controller’s entire data set where the request concerns data disclosed to a specific processor. The full text of the judgment in the Judykatura database shows why it is essential to distinguish between a complete copy of data held by the controller and a copy of data actually sent to a debt collection company. The Supreme Administrative Court (NSA) held that only the latter enables the data subject to verify the lawfulness of the disclosure.
The rest of this analysis, all theses and the full text of the ruling are available with an AKTUALNOŚCI PLUS subscription.
Find out how EU supervisory authorities, administrative and civil courts and the CJEU reason their decisions — and keep your organisation aligned with current case law.