Not named in the source

What happened

The DPA held that the daughter of a deceased patient could not request access under Article 15 GDPR from a hospital regarding her deceased father’s cause of death, as the information refers to her father and the right of access is a strictly personal and non-transferable right.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3)Read →
• Art. 15Right of access by the data subjectRead →
• Art. 27Representatives of controllers or processors not established in the UnionRead →

• Data subject rights
• Transparency