- Enforcing jurisdiction
- Estonia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
EPLÜ – Complaint Upheld (Estonia, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
EPLÜ, the Estonian Shooting Association, refused to share meeting minutes related to a person's request, claiming it only had to disclose information tied to public tasks. The Data Protection Authority found that the refusal was not valid and ordered the reopening of the case. This matters because it reinforces individuals' rights to access their personal data, regardless of the organization's claims.
What happened
EPLÜ denied a request for meeting minutes concerning an individual, stating it was only obligated to share information related to public tasks.
Who was affected
The individual who requested the meeting minutes from EPLÜ.
What the authority found
The Data Protection Authority ruled that EPLÜ could not deny the request based on its claims about public tasks and ordered the case to be reopened.
Why this matters
This decision highlights the importance of transparency and access to personal data for individuals. Organizations should be aware that claims about their obligations do not exempt them from sharing personal data when requested.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 22 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A individual submitted a request to receive information to the Estonian Shooting Association, hereinafter EPLÜ. The information regarded minutes of meetings of the EPLÜ's board about issues concerning the individual -among others. EPLÜ refused to comply with the request claiming that it is a legal entity mainly governed by private law. Only information which relates to the performance of its public tasks could be disclosed upon request. EPLÜ also claimed that some of the requested documents had been destroyed. The individual complained before the DPA revoking Article 15(1) and (3) GDPR and the DPA to order the delivering of the requested information. The DPA found that there was a court decision on the the issue at stake and the same parties, which was final and prohibited the request the information at stake. Moreover, the fact that the parties made a settlement of their claims does not deprive an individual from their right of access when their personal data is processed. The fact that the information requested does not concern the public tasks of EPLÜ as a data controller is not relevant for the exercise of the right of access according to Article 15 GDPR. The DPA ordered the reopening of the judicial proceedings with regard to the issue at stake.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for EPLÜ in EE
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. EPLÜ - Estonia (2020). Retrieved from cookiefines.eu
Last updated: