# Rb. Rotterdam - ROT 25/8349, 25/8350, 25/6295, 25/6296 and 25/6297

- Type: News
- Source: GDPRhub
- Date: 2026-08-18
- Original: https://gdprhub.eu/index.php?title=Rb._Rotterdam_-_ROT_25/8349,_25/8350,_25/6295,_25/6296_and_25/6297
- Canonical: https://overview.legal/posts/291287
- Topics: Article 14 Information Provision Requirements, Personal Data, Controllers

## Summary

The Court held that numerous repetitive GDPR requests were manifestly excessive under Article 12(5) GDPR and could be refused, while Article 14 GDPR requests did not constitute appealable administrative decisions. English Summary. Facts. A data subject submitted 73 separate GDPR requests to the Municipal Executive of Rotterdam, the controller, between November 2024 and February 2025. Most requests contained several sub-requests and relied on Articles 5, 6, 10, 14, 15, 16, 17 and 19 GDPR. The con

## Full text

The Court held that numerous repetitive GDPR requests were manifestly excessive under Article 12(5) GDPR and could be refused, while Article 14 GDPR requests did not constitute appealable administrative decisions. English Summary. Facts. A data subject submitted 73 separate GDPR requests to the Municipal Executive of Rotterdam, the controller, between November 2024 and February 2025. Most requests contained several sub-requests and relied on Articles 5, 6, 10, 14, 15, 16, 17 and 19 GDPR. The controller refused the requests under Articles 15, 16, 17 and 19 GDPR on the basis of Article 12(5) GDPR, considering them manifestly excessive. It found that the requests had been submitted systematically within short periods, often concerned the same subject matter and could have been consolidated. The controller also considered that processing the requests imposed an unnecessary administrative burden. Requests under Articles 5, 6, 10 and 14 GDPR were treated as requests for information rather th

## Cited law provisions (8)

### GDPR — gdpr-art-12-par-3-en

The controller shall provide information on action taken on a request under Articles 15 to 22 to the data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. The controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request by electronic form means, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject.

### GDPR — gdpr-art-12-par-5-en

Information provided under Articles 13 and 14 and any communication and any actions taken under Articles 15 to 22 and 34 shall be provided free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:

### GDPR — gdpr-art-1-en

Subject-matter and objectives

### GDPR — gdpr-art-8-en

Conditions applicable to child's consent in relation to information society services

### GDPR — gdpr-art-12-en

Transparent information, communication and modalities for the exercise of the rights of the data subject

### GDPR — gdpr-art-14-en

Information to be provided where personal data have not been obtained from the data subject

### GDPR — gdpr-art-15-en

Right of access by the data subject

### GDPR — gdpr-art-34-en

Communication of a personal data breach to the data subject

---
Generated by overview.legal · https://overview.legal/posts/291287 · 2026-08-22