Knowledge Base → Operational & accountability → 🙋 Data Subject Rights (DSAR)

🙋 Data Subject Rights (DSAR)

Rights of access, rectification, erasure, restriction, portability, objection and rights around automated decisions (Arts 12–22) — handling, deadlines and edge cases.

Key resources

See also: Art. 22 profiling · Enforcement & Case Law

🆕 Recent additions (auto)

2026-09-07 ECJ Preview: Data Retention for Fraud Investigation (C-661/24) — In case C-661/24 (Académie Fiscale), the issue concerns the compatibility of a Belgian law on the storage and processing of communication data with EU data protection law and the fundamental rights of the EU. The case was referred by the Belgian Constitutional Court (Cour constitutionnelle) to the European Court of Justice for a preliminary ruling. Specifically, it examines whether providers of electronic communication services (e (Datenzirkus (BvD))
2026-09-07 Federal Labour Court: Entitlement to Copies of Compliance Reports — An employee is accused of misconduct and – suddenly – an information request under Article 15 GDPR arrives at the employer. The Federal Labour Court had to address the relevant questions regarding an information request concerning a compliance report in a case (Datenzirkus (BvD))
2026-09-07 Austrian Administrative Supreme Court: Retention of Data of Rejected Applicants — The Austrian Administrative Supreme Court dismissed the lawsuit of a person who argued that a precautionary deletion request under Article 17 GDPR of applicant data in the event of non-consideration would override the company’s retention interest to defend itself against potential claims under the General Equal Treatment Act (Datenzirkus (BvD))
2026-09-07 Austrian Administrative Supreme Court: Data Processor Not Obliged to Provide Information Under Article 15 GDPR — Even if a data processor of an energy provider incorrectly sent collection letters, reminders, and even civil lawsuits in its own name, as a data processor it remains not the addressee of information requests under Article 15 GDPR, as the Austrian Administrative Supreme Court decided. It established that the company carried out the relevant data processing activities exclusively on behalf of the energy provider and did not itself determine the purpose and means of… (Datenzirkus (BvD))
2026-09-07 Austrian Administrative Supreme Court: Scope of Information in a University Appeals Commission — The Austrian Administrative Supreme Court decided that an information entitlement under Article 15(1) GDPR of an applicant also includes the recipients of their data according to Art (Datenzirkus (BvD))

Curated + auto-enriched.