DSB (Austria) - 2025-0.395.497

}}}} The DPA held that under [[Article 15 GDPR|Article 15 GDPR]], a data subject has the right to access personal data concerning themselves, but this does not extend to entire documents containing information about third parties. Confidential communications and legal opinions within disciplinary proceedings are exempt.The DPA held that under [[Article 15 GDPR]], a data subject has the right to access personal data concerning themselves, but this does not extend to entire documents containing information about third parties. Confidential communications and legal opinions within disciplinary proceedings are exempt. == English Summary ==== English Summary == === Facts ====== Facts === The data subject filed a disciplinary complaint against a lawyer with a regional Bar Association (the controller). He subsequently submitted an access request under [[Article 15 GDPR|Article 15 GDPR]], seeking all personal data processed about him. The Bar Association provided certain information but refuse