Not named in the source

What happened

The DPA held that a controller cannot systematically request data subjects to submit a signed form and a copy of their ID for an access request, as facilitating the data subject's rights under the GDPR requires a case by case assessment.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(c) · 5(1)(e)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(2) · 12(6)Read →
• Art. 25Data protection by design and by default25(2)Read →
• Art. 58Powers58(2)(c) · 58(2)(d)Read →

• Accountability
• Data principles
• Transparency