Case Law · Rb. Den Haag EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Rb. Den Haag · C/09/697386 / HA ZA 26-52

A court held that an Article 15 GDPR claim was inadmissible because a for-profit organisation acted on behalf of the data subjects without meeting the requirements of Article 80(1) GDPR.

Rb. Den Haag
Personal Data Controllers Access Controls AI Value Chain Actors and Roles Right of Access Procedures
Sep 15, 2026 Source gdprhub.eu

How it connects

Related across sources

Garante · 616/2026 Facts. Facts The DPA received a complaint from a data subject concerning the processing operations of the University Health Agency of Friuli Centrale’s (the controller) electronic… 616/2026 ·Italy Sep 15, 2026 Personal Data Access Controls Health Data
€5,250 PS-01092025 The DPA fined a public-sector group €5,250 for unlawfully disclosing an employee's access-request audio recording to four additional recipients, in breach of Article 5(1)(a)… Catalonia ·APDCAT ·Art. 5 Sep 15, 2026 Fairness & Transparency Right of Access Procedures Personal Data
pd-00055-2026 The DPA held that a blanket refusal to disclose the identity of persons accessing a patient’s health data infringed Article 15 GDPR and ordered the controller to grant access or… pd-00055-2026 ·Spain ·AEPD Sep 15, 2026 Integrity and Confidentiality Principle Health Data Special Categories of Data
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Apr 13, 2021 Social Media Marketing Audit Logs
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Apr 17, 2023 Right of Access Procedures Right of Access Personal Data
2026 EDPB Annual Report 2025 Clarity in action: Supporting stakeholders through guidance and dialogue Annual Report 2025 Foreword 3 Highlights 4 1. The EDPB Secretariat 6 1.1 Mission And Activities 8 2.… Apr 9, 2026 AI Enforcement Actions Social Media AI Information Duties

Full text

A court held that an Article 15 GDPR claim was inadmissible because a for-profit organisation acted on behalf of the data subjects without meeting the requirements of Article 80(1) GDPR. English Summary. Facts. The District Court of The Hague (the Court) considered an action brought by 51 individuals who had participated in online gambling offered through Unibet before 1 October 2021. At that time, the relevant websites were operated by Risepoint Limited, formerly Trannel International Ltd. Risepoint was the controller in relation to the personal data concerned. Kindred Group Limited had previously been the parent company of Risepoint. The data subjects had authorised Dynamiet Nederland B.V., a commercial legal services provider, to act on their behalf in matters relating to gambling losses. The authorisation expressly included submitting access requests under Article 15 GDPR concerning account and transaction data held by online gambling providers. Between December 2024 and January 20

Related documents