Public Employment Service Austria and ABZ AUSTRIA

What happened

The DPA held that the deletion of personal data by the controller during the proceedings constituted a violation of the data subject's right of access under Article 15 in conjunction with Article 5(1)(a) GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 4Definitions4(10) · 4(7) · 4(8)Read →
• Art. 5Principles relating to processing of personal data5(1)(a)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(5) · 12(5)(b)Read →
• Art. 15Right of access by the data subject15(1) · 15(3)Read →
• Art. 28Processor28(10) · 28(3)(e)Read →
• Art. 57Tasks57(1)(f)Read →

• Data principles
• Data subject rights
• Processor obligations
• Transparency