# Judgment of the Court (Eighth Chamber), 12 December 2013.#X.#Request for a preliminary ruling from the Gerechtshof te ’s-Hertogenbosch.#Protection of individuals with regard to the processing of personal data — Directive 95/46/EC — Conditions for exercising a right of access — Levying of excessive fees.#Case C‑486/12. - Type: Case Law - Source: Court of Justice of the European Union - Identifier: C-486/12 - Date: 2013-12-12 - Original: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62012CJ0486 - Canonical: https://overview.legal/posts/132372 - Topics: Personal Data, Controllers, Right of Access, Public Authority, Right of Access Procedures, Processing, Public Sector ## Summary In Case C-486/12, the Court of Justice of the European Union interpreted Article 12(a) of Directive 95/46/EC in response to a preliminary ruling from the Gerechtshof te 's-Hertogenbosch concerning whether a Dutch municipality could levy a fee for providing a data subject with a certified transcript of personal data. The core issue was whether the directive's guarantee of access "without excessive delay or expense" permits controllers to charge fees, or whether the term "expense" should be read disjunctively from "delay," potentially allowing reasonable fees. The Court held that while Article 12(a) does not categorically prohibit fees for access to personal data, any fee charged must not be excessive, meaning it must not pose a deterrent to the exercise of the right of access, and that a fee is likely excessive if it exceeds the cost of reproducing and communicating the data. ## Sections (33) ### ¶1 This request for a preliminary ruling concerns the interpretation of Article 12 of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ 1995 L 281, p. 31). > Topics: Personal Data, Processing · Applies: gdpr-art-12-en ### ¶2 The request has been made in proceedings brought by X concerning payment of a fee for delivery of a certified transcript containing personal data. > Topics: Personal Data ### ¶3 Article 12 of Directive 95/46, entitled ‘Right of access’, provides: ‘Member States shall guarantee every data subject the right to obtain from the controller: (a) without constraint at reasonable intervals and without excessive delay or expense: — confirmation as to whether or not data relating to him are being processed and information at least as to the purposes of the processing, the categories of data concerned, and the recipients or categories of recipients to whom the data are disclosed, — communication to him in an intelligible form of the data undergoing processing and of any available information as to their source, — knowledge of the logic involved in any automatic processing of data concerning him at least in the case of the automated decisions referred to in Article 15(1); (b) as appropriate the rectification, erasure or blocking of data the processing of which does not comply with the provisions of this Directive, in particular because of the incomplete or inaccurate nature of the data; (c) notification to third parties to whom the data have been disclosed of any rectification, erasure or blocking carried out in compliance with (b), unless this proves impossible or involves a disproportionate effort.’ > Topics: Right of Access Procedures, Right of Access, Personal Data, Controllers · Applies: gdpr-art-15-par-1-en, gdpr-art-12-en ### ¶4 Article 79 of the Wet gemeentelijke basisadministratie persoonsgegevens (Law on personal data held by local authorities) (Stb. 1994 No 494) (‘the Wet GBA’) provides: ‘1. The College shall inform anyone, on request, in writing, within four weeks and free of charge, whether personal data relating to that person are being processed in the database. In so far as such data are being processed, the person making the request regarding the municipal database must receive the written notification referred to in Article 78(3). … 2. The College shall provide anyone, on request, within four weeks and free of charge, with access to the data relating to that person contained in the database. … 3. The College shall provide anyone, on request, within four weeks, with a transcript (certified if required), in an intelligible form, of the personal data relating to him which are being processed in the database, and the available information on the source of such data in so far as the person making the request is not himself the source. …’ > Topics: Personal Data · Applies: gdpr-art-78-par-3-en, gdpr-art-79-en ### ¶5 Article 229 of the Gemeentewet (Law on municipalities) is worded as follows: ‘1. Duties may be levied on: … (b) the use of services provided by or on behalf of the municipal authorities; …’ ### ¶6 Article 229b(1) of the Gemeentewet provides: ‘In the Regulations on the basis of which duties as referred to in Article 229(1)(a) and (b) are levied, the rates shall be set in such a way that the estimated income from the duties does not exceed the estimated expenditure related thereto. …’ ### ¶7 In proceedings contesting a decision imposing a fine on X for a traffic offence, X sought to show that she had never received the notices requesting payment of that fine, as they had been sent to the wrong address. To that end, X asked her municipality of residence to disclose her personal data for the years 2008 and 2009, in particular her various addresses. In response, the municipality provided a certified transcript of the personal data in question pursuant to Article 79(3) of the Wet GBA and, in exchange, demanded payment of a fee of EUR 12.80. > Topics: Public Authority, Personal Data · Applies: gdpr-art-79-en ### ¶8 X brought an action contesting that request for payment, but was unsuccessful. In her appeal before the Gerechtshof te ’s-Hertogenbosch (Regional Court of Appeal, te ’s-Hertogenbosch; or ‘the referring court’), X claims not to have requested a certified transcript, but simply to have sought to obtain her personal data on the basis of the Wet Openbaarheid van Bestuur (Law on open government). In the light of that legal basis, X argues that no fees should have been levied. > Topics: Personal Data ### ¶9 For its part, the municipality contends that the personal data in question cannot be provided in any way other than by certified transcript pursuant to Article 79(3) of the Wet GBA. As provision of a transcript to an individual is connected with satisfying the private interests of that individual, it is a service in respect of which, under Article 229(1)(b) of the Gemeentewet, payment of a fee may be required. > Topics: Public Authority, Personal Data · Applies: gdpr-art-79-en ### ¶10 The referring court observes that (i) certified transcripts of personal data are the only ones to be officially recognised and used by the public authorities and (ii) the provision of data from municipal files falls within the scope of Directive 95/46, regardless of the basis, in national law, for the request for access to such data. > Topics: Personal Data ### ¶11 According to that court, Article 12(a) of Directive 95/46 guarantees every data subject the right to obtain, without constraint, at reasonable intervals and without excessive delay or expense, communication to him in an intelligible form of the personal data undergoing processing and of any available information as to their source. That court is also of the view that Article 12(a) of Directive 95/46 can be construed in two ways: — the communication of personal data must take place without excessive delay or excessive expense, or — the communication of personal data must take place without excessive delay and without expense. > Topics: Personal Data · Applies: gdpr-art-12-en ### ¶12 In the former case, it is permissible to levy a fee, so long as it is not excessive. In the latter case, levying a fee is prohibited. ### ¶13 As regards the issue of whether the fee in question is excessive, the referring court observes that, under Article 229b of the Gemeentewet, the rates are to be set in such a way that the income from that fee does not exceed the related expenditure. However, that is no guarantee that the income from fees will not be higher than the expenditure related to the communication of personal data. The referring court is also uncertain as to the exact point at which fees levied may be regarded as excessive for the purposes of Article 12(a) of Directive 95/46. > Topics: Personal Data · Applies: gdpr-art-12-en ### ¶14 If it is found that Article 12(a) of Directive 95/46 must be interpreted as meaning that personal data is to be communicated free of charge, the referring court is uncertain as to whether it is necessary to provide an alternative to the provision of a transcript which must be paid for pursuant to Article 79(3) of the Wet GBA, perhaps by allowing data to be viewed on a display screen. However, it points out that access to a display screen does not constitute a communication for the purposes of Article 12(a) of the directive and that Article 8 of the Charter of Fundamental Rights of the European Union (‘the Charter’) protects only the right to access data. Access to data via a display screen has the additional disadvantage that, unlike a certified transcript, it cannot be accepted as authentic and accurate by the public authorities (Case C-553/07 Rijkeboer [2009] ECR I-3889) and cannot provide a historical overview of the data registered. > Topics: Personal Data · Applies: gdpr-art-8-en, gdpr-art-12-en, gdpr-art-79-en ### ¶15 In those circumstances, the Gerechtshof te’s-Hertogenbosch decided to stay the proceedings and to refer the following questions to the Court of Justice for a preliminary ruling: ‘1. Does the provision of access [to data] (pursuant to Article 79(2) of the Wet GBA) constitute compliance with the obligation [to communicate] data undergoing processing as referred to in the second indent of Article 12(a) of Directive [95/46/EC]? 2. Does Article 12(a) of [that directive] preclude the levying of fees in respect of the communication, by means of a transcript from the municipal database, of the personal data undergoing processing? 3. If Question 2 is to be answered in the negative: is the levying of the present fee excessive [for the purposes of] Article 12(a) of [that directive]?’ > Topics: Personal Data · Applies: gdpr-art-79-par-2-en, gdpr-art-12-en ### ¶16 By its second question, which it is appropriate to examine first, the referring court asks, in essence, whether Article 12(a) of Directive 95/46 is to be interpreted as precluding the levying of fees in respect of the communication of personal data by a public authority. > Topics: Public Authority, Public Sector, Personal Data · Applies: gdpr-art-12-en ### ¶17 All the Member States which have submitted written observations to the Court maintain, as does the European Commission, that Article 12(a) of Directive 95/46 allows public authorities to require payment of fees in respect of the communication of personal data referred to in that provision, so long as those fees are not excessive. > Topics: Personal Data · Applies: gdpr-art-12-en ### ¶18 It should be pointed out that the Dutch-language version of Article 12(a) of Directive 95/46 uses the phrase ‘bovenmatige vertraging of kosten’. That wording might be thought to suggest that the adjective ‘bovenmatige’ (‘excessive’) relates only to delays (‘vertraging’), thereby suggesting that the right to obtain communication of the data referred to in that provision should not be subject to the payment of fees. > Applies: gdpr-art-12-en ### ¶19 However, for the purposes of its interpretation, Article 12(a) of Directive 95/46 cannot be examined solely in the Dutch-language version: according to settled case-law, the need for the uniform application of an EU measure and, accordingly, for a uniform interpretation of that measure makes it impossible to consider one version of the text in isolation, but requires that it be interpreted on the basis of both the real intention of its author and the aim which the latter seeks to achieve, in the light, in particular, of the versions in all languages (see, inter alia, Case 29/69 Stauder [1969] ECR I-419, paragraph 3; Case C-280/04 Jyske Finans [2005] ECR I-10683, paragraph 31; and Case C-445/09 IMC Securities [2011] ECR I-5917, paragraph 25). > Applies: gdpr-art-12-en ### ¶20 There is nothing in the non-Dutch-language versions of Article 12(a) of Directive 95/46 to suggest that Member States are required to communicate the information referred to in that provision free of charge. On the contrary, other versions of that provision – for example, the Spanish (‘sin retrasos ni gastos excesivos’), Danish (‘uden større ventetid eller større udgifter’), German (‘ohne unzumutbare Verzögerung oder übermäβiger Kosten’), French (‘sans délais ou frais excessifs’), Italian (‘senza ritardi o spese eccessivi’), Portuguese (‘sem demora ou custos excessivos’) and Finnish (‘aiheetonta viivyvtystä tai aiheettomia kustannuksia’) – indicate that Member States are merely required to communicate such information without levying excessive fees. > Applies: gdpr-art-12-en ### ¶21 It is true that some language versions of the provision in question – such as the English (‘without excessive delay or expense’) and Swedish (‘större tidsutdräkt eller kostnader’) versions – are, like the Dutch version, ambiguous in so far as the adjective ‘excessive’ does not explicitly qualify the word ‘expense’. However, none of the language versions of that provision unequivocally states that communication must take place free of charge. ### ¶22 It is therefore clear from the wording of Article 12(a) of Directive 95/46 that that provision does not require the Member States to levy fees when the right to access personal data is exercised; nor, however, does it prohibit the levying of such fees, so long as they are not excessive. > Topics: Personal Data · Applies: gdpr-art-12-en ### ¶23 Consequently, the answer to Question 2 is that Article 12(a) of Directive 95/46 must be interpreted as not precluding the levying of fees in respect of the communication of personal data by a public authority. > Topics: Public Authority, Public Sector, Personal Data · Applies: gdpr-art-12-en ### ¶24 By its third question, the referring court seeks to ascertain, in essence, the criteria on the basis of which it is possible to ensure that a fee which is levied when the right to access personal data is exercised is not excessive for the purposes of Article 12(a) of Directive 95/46. > Topics: Personal Data · Applies: gdpr-art-12-en ### ¶25 Under that provision, the Member States are to confer upon any person a right of access to personal data relating to him and to information on the recipients or categories of recipients of such data and the logic involved in any automatic processing of such data. In view of the considerations made above in the analysis of Question 2, Article 12(a) of Directive 95/46 must be interpreted as requiring Member States to ensure that the exercise of that right of access takes place without constraint, without excessive delay, and without excessive expense. > Topics: Right of Access Procedures, Right of Access, Personal Data · Applies: gdpr-art-12-en ### ¶26 Accordingly, it is for the Member States to determine whether communication of the information referred to in Article 12(a) of Directive 95/46 entails the payment of fees and, if so, to set such fees at a level which is not excessive. > Applies: gdpr-art-12-en ### ¶27 However, that provision does not list any criteria for assessing whether fees levied by a Member State when the right of access provided for thereunder is exercised are to be regarded as excessive. In order to establish such criteria, Article 12(a) of Directive 95/46 must be construed with regard to its purpose when examined in the light of the objectives of that directive. > Topics: Right of Access Procedures, Right of Access · Applies: gdpr-art-12-en ### ¶28 Thus, it is for any Member State which requires payment of a fee from individuals exercising the right to access the data referred to in Article 12(a) of Directive 95/46 to fix that fee at a level which constitutes a fair balance between, on the one hand, the interest of the data subject in protecting his privacy, in particular through his right to have the data communicated to him in an intelligible form, so that he is able, if necessary, to exercise his rights to rectification, erasure and blocking of the data (in the event that the processing of the data does not comply with the directive) and his rights to object and to bring legal proceedings and, on the other, the burden which the obligation to communicate such data represents for the controller (see, by analogy, Rijkeboer, paragraph 64). > Topics: Personal Data, Controllers · Applies: gdpr-art-12-en ### ¶29 In view of the importance – highlighted in recitals 2 and 10 in the preamble to Directive 95/46 – of protecting privacy, emphasised in the case-law of the Court (see Rijkeboer, paragraph 47 and the case-law cited) and enshrined in Article 8 of the Charter, the fees which may be levied under Article 12(a) of the directive may not be fixed at a level likely to constitute an obstacle to the exercise of the right of access guaranteed by that provision. > Topics: Right of Access Procedures, Right of Access · Applies: gdpr-art-8-en, gdpr-art-12-en ### ¶30 It should be held that, for the purposes of applying Article 12(a) of Directive 95/46, where a national public authority levies a fee on an individual exercising the right to access personal data relating to him, the level of that fee should not exceed the cost of communicating such data. That upper limit does not prevent the Member States from fixing such fees at a lower level in order to ensure that all individuals retain an effective right to access such data. > Topics: Public Authority, Public Sector, Personal Data · Applies: gdpr-art-12-en ### ¶31 Accordingly, the answer to Question 3 is that Article 12(a) of Directive 95/46 must be interpreted as meaning that, in order to ensure that fees levied when the right to access personal data is exercised are not excessive for the purposes of that provision, the level of those fees must not exceed the cost of communicating such data. It is for the national court to carry out any verifications necessary, having regard to the circumstances of the case. > Topics: Personal Data · Applies: gdpr-art-12-en ### ¶32 Question 1 must be understood to arise solely in the event that Article 12(a) of Directive 95/46 is interpreted as precluding the levying of fees in respect of the communication of personal data by a public authority. As it is, in view of the answer to Question 2, there is no need to answer Question 1. > Topics: Public Authority, Public Sector, Personal Data · Applies: gdpr-art-12-en ### ¶33 Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the national court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable. ## Cited law provisions (6) ### GDPR — gdpr-art-15-par-1-en The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: ### GDPR — gdpr-art-78-par-3-en Proceedings against a supervisory authority shall be brought before the courts of the Member State where the supervisory authority is established. ### GDPR — gdpr-art-79-par-2-en Proceedings against a controller or a processor shall be brought before the courts of the Member State where the controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers. ### GDPR — gdpr-art-8-en Conditions applicable to child's consent in relation to information society services ### GDPR — gdpr-art-12-en Transparent information, communication and modalities for the exercise of the rights of the data subject ### GDPR — gdpr-art-79-en Right to an effective judicial remedy against a controller or processor --- Generated by overview.legal · https://overview.legal/posts/132372 · 2026-07-20