Supreme Administrative Court: authority must establish controller status
The full text of the judgment in the Judykatura database shows a dispute concerning the limits of an order to disclose a patient’s data contained in psychological records. The key point of the ruling is the distinction between the absence of proof that an entity is the controller of specific data and a finding that it is not the controller.
The rest of this analysis, all theses and the full text of the ruling are available with an AKTUALNOŚCI PLUS subscription.
Find out how EU supervisory authorities, administrative and civil courts and the CJEU reason their decisions — and keep your organisation aligned with current case law.