Court case W 254 2323066 – 1/14E – Court Ruling (Austria, 26)
Court ruling (pre-GDPR, Directive 95/46/EC)
This national court ruling predates the GDPR and interprets earlier data protection law. It is excluded from cookie statistics and the Risk Calculator.
An individual was excluded from an integration course and asked the organization for the reasons behind this decision. The organization refused to provide the information, leading the individual to file a complaint. The court ruled that the request did not meet the criteria for accessing personal data under GDPR, which is important for understanding how access requests should be made.
What happened
The court upheld a decision that an individual's request for information about their exclusion from a course did not qualify as a valid access request under GDPR.
Who was affected
The individual who was excluded from the integration course and sought information about the reasons for their exclusion.
What the authority found
The court decided that the individual's request lacked the necessary clarity to be considered an access request under Article 15 of GDPR.
Why this matters
This case highlights the importance of clearly stating the purpose and details in access requests for personal data. It reminds individuals to be specific when asking organizations for their information.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The data subject participated in an integration course and was excluded from the course for disciplinary reasons. As a reaction, he addressed a letter to the organisation responsible for the integration course. In this letter, he asked the organisation to inform him about the reasons that lead to his exclusion from the course. In the letters, he did not refer to the GDPR, data protection or the processing of data. He repeated his request in four subsequent letters. The organisation rejected his request. The data subject lodged a complaint with the DPA, claiming a violation of Article 15 GDPR. The DPA rejected his complaint on the grounds that his request to the organisation could not be understood as an access request provided for by Article 15 GDPR. The data subject appealed the decision to the Federal Administrative Court (Bundesverwaltungsgericht). The court upheld the decision of the DPA. A request to access to their personal data by the data subject is a prerequisite for a possible violation of a data subject’s access right. Article 15 GDPR does not request the data subject to state any reasons for their access request or follow a specific format. However, it can be concluded from Recital 63, that under certain circumstances, the data subject can be expected to make their request precise, e.g. what personal data the data subject requests access to. In general, the request is to be interpreted objectively from a third-person-perspective, considering all circumstances. In the light of the aforementioned, the court decided that the letter the data subject sent to the organisation must objectively not be understood as an access request. It did not refer to the GDPR, data protection or the processing of personal data at all and merely expressed a request to the reason for his exclusion from the course, which is an information request. An information request is a different instrument that is separate from an access request pursuant to Article 15 GDPR. The first
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case W 254 2323066 – 1/14E in AT
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case W 254 2323066 – 1/14E - Austria (26). Retrieved from cookiefines.eu
Last updated: