News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

DSB (Austria) - 2025-0.395.497

Right of Access Personal Data Data Subject Rights Exercise Modalities and Procedures IP Address Supervisory Authorities Controllers Processing Agreement Law Enforcement
Jan 12, 2026
Summary

The data protection authority (DPA) has determined that, according to Article 15 of the GDPR, an individual has the right to access personal data relating to them, but this right does not extend to complete documents that contain information about third parties. Confidential communications and legal advice within disciplinary proceedings are excluded. The data protection authority (DPA) has determined that, according to Article 15 of the GDPR, an individual has the right to access personal data relating to them, but this right does not extend to complete documents that contain...

How it connects

References

Related across sources

Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Case Law Google LLC v CNIL CJEU Case Law GC and Others v CNIL CJEU Case Law Peter Nowak v Data Protection Commissioner CJEU Case Law CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is CJEU Literature The Court of Justice on the Excessiveness of Access Requests under the GDPR European Journal of Risk Regulation

Full text

The data protection authority (DPA) ruled that, according to Article 15 of the GDPR, an individual has the right to access personal data relating to them, but this right does not extend to complete documents that contain information about third parties. Confidential communications and legal advice within disciplinary proceedings are excluded. The data protection authority (DPA) ruled that, according to Article 15 of the GDPR, an individual has the right to access personal data relating to them, but this right does not extend to complete documents that contain information about third parties. Confidential communications and legal advice within disciplinary proceedings are excluded. Summary in English. Summary in English. Facts. The individual filed a disciplinary complaint against a lawyer with a regional bar association (the responsible party). He then submitted a request for access under Article 15 of the GDPR, requesting all personal data about himself. The bar association provided some information but refused to provide further information. --- This content has been automatically translated using machine translation. The original version is available in the source language. --- This content was automatically translated using machine translation. The original version is available in the source language.

Similar Content