Regulatory Watch  /  European Union  /  Court ruling
Moderate impactCourt rulingDecided

CJEU rules GDPR right of access must include documents and database extracts

The Court of Justice of the European Union held that a data subject’s right of access under Article 15 GDPR includes providing the data in context, such as relevant documents and database extracts. The ruling arose from a complaint against credit reporting agency CRIF after it supplied only a raw data list. The decision emphasizes that a true copy must be an accurate, comprehensible reproduction of the personal data.

Why it matters: The ruling expands the GDPR right of access, requiring controllers to supply contextual information, which strengthens data‑subject rights.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
noyb win at CJEU: Right of access may include documents and database extracts
noyb · primary source · May 4, 2023
The Court of Justice confirmed that there is no "threshold" for GDPR damages
noyb · May 4, 2023
noyb win at CJEU: Right of access may include documents and database extracts
noyb · May 4, 2023
The Court of Justice confirmed that there is no "threshold" for GDPR damages
noyb · May 4, 2023
Details
JurisdictionEuropean Union
RegulatorEDPB
CourtCourt of Justice of the European Union
LawGeneral Data Protection Regulation
StatusDecided
PublishedMay 4, 2023
Effectivenot stated
DecisionMay 4, 2023
OrganisationsCRIF, Austrian Data Protection Authority, Austrian Postal Service
Topicsaccess, correction, deletion, privacy
Datapersonal, financial