Case Law · SO Warszawa ·C 310/23 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

SO Warszawa: Controller warned for violating GDPR Arts. 5(1), 6(1), and 15(1)

Permanent link: The responsible party did not respond adequately and provided unclear information or referred the individual to third parties.

Original title: SO Warszawa - Case C 310/23

Judgment

Controllers Personal Data Supervisory Authorities Right of Access Information Provision Modalities and Communication Methods
Jan 13, 2026
Summary

As a result, the individual filed a complaint with the Data Protection Authority. The responsible party did not respond adequately and provided unclear information or referred the individual to third parties. As a result, the individual filed a complaint with the Data Protection Authority. The Data Protection Authority has issued a final decision in which the responsible party is warned for violating Article 6(1) of the GDPR and Article 5(1).

Full text 2 paragraphs

Paragraphs carrying a topic or an applied provision show those connections inline
§

Permanent link. The responsible party did not respond adequately, provided unclear information, or referred the individual to third parties. As a result, the individual filed a complaint with the Data Protection Authority. The responsible party did not respond adequately, provided unclear information, or referred the individual to third parties. As a result, the individual filed a complaint with the Data Protection Authority. The Data Protection Authority has made a final decision in which the responsible party is warned for violating Article 6(1) and Article 5(1)(b) and (e) of the GDPR. The Data Protection Authority also found that the responsible party had failed to comply with its obligations under Article 15(1) and (3) of the GDPR, by providing inaccurate information and refusing to provide a copy of the personal data. The Data Protection Authority has made a final decision in which the responsible party is warned for violating Article 6(1), Article 5(1)(b) and Article 5(1)(e) of the GDPR.

Personal Data Supervisory Authorities applies Art. 5(1)(b)Art. 5(1)(e)Art. 6(1)Art. 15(1)
§

The Data Protection Authority also found that the responsible party... --- *This content has been automatically translated using machine translation. The original version is available in the source language.* --- *This content was automatically translated using machine translation. The original version is available in the source language.*

Supervisory Authorities

How it connects

2 of 2 paragraphs apply legislation or carry a topic — see them in the full text ↓

References

Related across sources

Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Apr 17, 2023 Right of Access Personal Data Right to Rectification
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Oct 13, 2021 GDPR Subject-Matter and Objectives Right to Restriction Data Portability
2025 EDPB Annual Report 2024 De EDPB heeft het Jaarraport van 2024 gepubliceerd. Met ook een handzame samenvatting voor degene die geen tijd hebben. Er wordt ook een lijst met zaken van enkele DPAs… Apr 23, 2025 Direct Marketing Legitimate Interest Privacy by Design
€120 Italian DPA sanctions Experian Italia for incomplete Art. 15 GDPR access responses on The DPA received several complaints from data subjects concerning Experian Italia S.p.A (the controller) an Italian credit information system. The controller was processing the… Italy ·Garante ·Art. 5, 12, 15 +1 Sep 16, 2026 Supervisory Authorities Privacy by Design Personal Data
2025 One-Stop-Shop case digest on right of access EDPB/SPE 16 jan 2025 One-Stop-Shop case digest on right of access. Een rapport opgesteld door Hanne Marie Motzfeldt (Københavns Universitet) waarin beslissingen inzake het… EDPB Jan 16, 2025 Right of Access Personal Data Legitimate Interest
HDPA · 12/2026 The complainant, a foreign national, submitted a complaint to the Hellenic DPA through his authorized attorney, seeking his deletion from the Hellenic the National Registry of… 12/2026 ·Greece ·Art. 23 May 13, 2026 Right of Access Criminal Data Personal Data
Related documents