# PHR - 22/01253

- Type: News
- Source: GDPRhub
- Date: 2026-07-17
- Original: https://gdprhub.eu/index.php?title=PHR_-_22/01253
- Canonical: https://overview.legal/posts/125598
- Topics: Personal Data, Healthcare

## Summary

Next, the PG examined whether the data subject may be entitled to access the medical assessment on the basis of a different regulation. In doing so, the PR looked at the GDPR. It held that a medical assessment qualifies as personal data and is thus subject to the GDPR. In principle, the data subject had a right to access her personal data in that assessment pursuant to Article 15(1) GDPR. However, Article 23(1)(i) GDPR and Article 41 UAVGthe Dutch implementing act for the GDPR provide the possib

## Full text

Next, the PG examined whether the data subject may be entitled to access the medical assessment on the basis of a different regulation. In doing so, the PR looked at the GDPR. It held that a medical assessment qualifies as personal data and is thus subject to the GDPR. In principle, the data subject had a right to access her personal data in that assessment pursuant to Article 15(1) GDPR. However, Article 23(1)(i) GDPR and Article 41 UAVGthe Dutch implementing act for the GDPR provide the possibility of a restriction to protect the rights and freedoms of others. In the present case, this is the right to prepare for the defence against a legal claim in freedom and seclusion. The PG argued that such a right exists based on Article 6(1) ECHR.See paragraph 7 of the decision for the extensive reasoning behind this argument.Next, the PG examined whether the data subject may be entitled to access the medical assessment on the basis of a different regulation. In doing so, the PR looked at the

## Cited law provisions (4)

### GDPR — gdpr-art-6-par-1-en

Processing shall be lawful only if and to the extent that at least one of the following applies:

### GDPR — gdpr-art-15-par-1-en

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

### GDPR — gdpr-art-23-par-1-pnt-i-en

the protection of the data subject or the rights and freedoms of others;

### GDPR — gdpr-art-41-en

Monitoring of approved codes of conduct

---
Generated by overview.legal · https://overview.legal/posts/125598 · 2026-07-17