Not named in the source

What happened

The Austrian DPA stated that the right to access does not always apply in absolute terms and that it may be restricted by third-party interests such as secrecy obligations. However, in order for such a restriction to apply, a data controller must properly substantiate their arguments for denying the right to access.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 1Subject-matter and objectives1(2)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3) · 12(4)Read →
• Art. 15Right of access by the data subjectRead →
• Art. 77Right to lodge a complaint with a supervisory authority77(1)Read →

• Data subject rights
• Transparency