Another sound decision coming from Germany. Data subject rights are not a right to know everything about a business. If a controller *wants* to provide information beyond the limits of Art. 15 GDPR, that is *its* right to do so – but a data subject cannot compel disclosure of such information or documents.
data protection privacy
Did this analysis get you thinking? Reach out!
DataLaws.net is entirely open-access, and instead of getting your data in exchange for this content, how about another trade? If this commentary saved you research time or sparked an idea, feel free to invite me over for tea, chai or a hot chocolate next time you are around Brussels or Antwerp - or invite me over to your offices for a chat!
Get in touch ↗ Let's connect on LinkedIn ↗