Data Subject Access Requests: When can a Controller Reject a Request as Abusive?
The Court of Justice of the European Union (‘CJEU’) has ruled that a data subject access request (‘DSAR’) can be abusive if it is being made solely for the purpose of making a claim for compensation. In Brillen Rottler GmbH v TC[1], the data subject had signed up for a newsletter from the optician company. About […]