De Staatssecretaris van Justitie en Veiligheid, Dienst Terugkeer en Vertrek – Court Ruling (Netherlands, 2021)

Court Ruling
DPA RbRotterdam19 March 2021Netherlands
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Dutch court ruled that the Repatriation and Departure Service did not have to provide original documents when fulfilling a data access request. The court stated that an overview of personal data is sufficient under GDPR. This ruling clarifies what is required when responding to access requests.

What happened

The Repatriation and Departure Service provided an overview of personal data instead of original documents in response to an access request.

Who was affected

An individual who requested access to their personal data held by the Repatriation and Departure Service.

What the authority found

The court held that providing an overview of personal data is sufficient and original documents are not required under GDPR.

Why this matters

This ruling clarifies that organizations can fulfill GDPR access requests by providing data summaries rather than original documents. Businesses should ensure their processes align with this interpretation to meet GDPR requirements.

GDPR Articles Cited

Art. 15 GDPR
Decision AuthorityRb. Rotterdam
Full Legal Summary
Detailed

The plaintiff requested access to his personal data processed by The Repatriation and Departure Service (Dienst Terugkeer & Vertrek) on the basis Article 12 GDPR and 15 GDPR. The State Secretary of Justice, on behalf of The Repatriation and Departure Service, provided the plaintiff with an overview. The plaintiff argues not all available, underlying information was provided. He argues that the State Secretary is in therefore in breach of the GDPR. The State Secretary claims he is not in possession of the underlying information the plaintiff is refering to. Should information about people other than the data subject be included in an access request based on Article 15 GDPR? Does Article 15 GDPR require that (copies of) the original documents are provided? The District Court Rotterdam holds that the right of access is limited to personal data concerning the data subject. Furthermore, an overview of the requested data suffices. The original documents (or a copy) don't have to be provided.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for De Staatssecretaris van Justitie en Veiligheid, Dienst Terugkeer en Vertrek in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

19 March 2021

Authority

DPA RbRotterdam

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. De Staatssecretaris van Justitie en Veiligheid, Dienst Terugkeer en Vertrek - Netherlands (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: