Skip to content
News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

HelHO - HelHO:2026:8

The district court denied the request in August 2025 and held that the information was in fact requested to investigate the backgrounds of individuals who had applied for the entertainment program for the purpose of making casting decisions, rather than for journalistic purposes as A claimed.The district court denied the request in August 2025 and held that the information was in fact requested to investigate the backgrounds of individuals who had applied for the entertainment program for the pu

How it connects

C/09/697386 / HA ZA 26-52 Rb. Den Haag · C/09/697386 / HA ZA 26-52 A court held that an Article 15 GDPR claim was inadmissible because a for-profit organisation acted on behalf of the data subjects without meeting the requirements of Article… Sep 15, 2026 Right of Access Procedures Personal Data Access Controls
€5.5M The DPA fined the Italian branch of the Bank of Bilbao Vizcaya Argentina S.A €5,508,000 for persistently sending in-app communications after a data subject had deactivated the feature and objected to such processing.The DPA fined the Italian branch of the… 613/2026 ·Italy ·Garante Sep 15, 2026 Personal Data Supervisory Authorities Controllers
€5,250 PS-01092025 The DPA fined a public-sector group €5,250 for unlawfully disclosing an employee's access-request audio recording to four additional recipients, in breach of Article 5(1)(a)… Catalonia ·APDCAT ·Art. 5 Sep 15, 2026 Fairness & Transparency Right of Access Procedures Personal Data
pd-00055-2026 The DPA held that a blanket refusal to disclose the identity of persons accessing a patient’s health data infringed Article 15 GDPR and ordered the controller to grant access or… pd-00055-2026 ·Spain ·AEPD Sep 15, 2026 Integrity and Confidentiality Principle Health Data Special Categories of Data
€500,000 SAN-2026-009 The DPA fined a hospital €500,000 for insufficient security measures which enabled a major data breach and for failing to inform 202,246 affected third parties of the breach.The… France ·CNIL Sep 15, 2026 Identification Health Data Special Categories of Data

Full text

The district court denied the request in August 2025 and held that the information was in fact requested to investigate the backgrounds of individuals who had applied for the entertainment program for the purpose of making casting decisions, rather than for journalistic purposes as A claimed.The district court denied the request in August 2025 and held that the information was in fact requested to investigate the backgrounds of individuals who had applied for the entertainment program for the purpose of making casting decisions, rather than for journalistic purposes as A claimed. A subsequently appealed the case to the Helsinki Court of Appeals and demanded that the controller be ordered to disclose the information specified in the information request. A argued that a journalistic purpose may also encompass editorial work related to the preparation of journalistic content. In this case, researching the backgrounds of applicants and selecting participants were part of the journalistic p