Keywords
know-how
confidential information
personal data
GDPR
How to Cite
Abstract
The data subject’s right to access information on data processing has a very broad meaning. Considering the latest developments in this field (mainly the CJEU ruling on Austrian posts and EDPB guidelines) one can draw the conclusion that the controller’s right to protect its confidential in-formation is limited and less valuable than the data subject’s rights. However, this may lead to unfair and unequal treatment of companies and data subjects. When looking at this right in a more systematic perspective, it seems that the model of the protection of personal data may go hand in hand with the controllers’ business interests. A different interpretation may lead to the discouragement of entrepreneurs, both EU and foreign, from conducting business in the European Union. This is not conducive to the development of the European market and certainly will not attract foreign capital.
References
Abu Gholeh, Magdalena, and Dominika Kuźnicka-Błaszkowska. Nakładanie administracyjnych kar pieniężnych w rozporządzeniu o ochronie danych osobowych. Aspekty praktyczne. Warszawa, 2020.
Łuczak, Joanna. “Article 15.” In RODO. Ogólne rozporządzenie o ochronie danych. Komentarz, edited by Edyta Bielak-Jomaa, and Dominik Lubasz. Warszawa, 2017: 507–516.
European Data Protection Board, Guidelines 01/2022 on data subject rights – Right of access, Adopted on 18 January 2022.
Fajgielski, Paweł. “Article 12.” In Ogólne rozporządzenie o ochronie danych. Komentarz. editd by Paweł Fajgielski. Lex, 2018.
Zanfir-Fortuna, Gabriela. “Article 15. Right of access by the data subject.” In The EU General Data Protection Regulation (GDPR). A commentary, ed- ited by Christopher Kuner, Lee A. Bygrave, and Christopher Docksey. New York, 2020: 449–468. DOI: https://doi.org/10.1093/oso/9780198826491.003.0046
Article 29 Working Party, Guidelines on transparency under Regulation 2016/679, adopted on 11 April 2018, WP260 rev.01.
Article 29 Working Party, Guidelines on the right to data portability, adopted on 5 April 2017, WP242 rev.01.
Decision of Austrian Data Protection Authority of 26 July 2019, no. DSB-D123.921/0005-DSB/2019.
Decision of Belgian Data Protection Authority of 29 July 2020, no. 41/2020.
Decision of Bulgarian Data Protection Authority of 28 October 2019, no. ППН-01-116/2019.
Decision of Cyprus Data Protection Authority of 17 June 2020, no. 11.17.001.008.001.
Decision of Cyprus Data Protection Authority of 8 July 2020, no. 11.17.001.007.219.
Decision of Danish Data Protection Authority of 6 September 2021, no. 2020-31-3586.
Decision of Danish Data Protection Authority of 26 November 2021, no. 2020-31-3894.
Decision of Danish Data Protection Authority of 31 March 2022, no. 2021-32-2438.
Decision of Danish Data Protection Authority of 22 June 2022, no. 2020-832-0028.
Decision of Data Protection Authority of Brandenburg of 18 October 2021, no. 10 Sa 443/21.
Decision of Data Protection Authority of Brandenburg of 2019 on unknown com- pany, <https://www.enforcementtracker.com/ETid-271>, access: 9.03.2023.
Decision of Finish Data Protection Authority of 18 November 2019, no. 8896/152/2019.
Decision of Finish Data Protection Authority of 29 April 2022, no. 10587/161/21.
Decision of French Data Protection Authority of 30 November 2022, no. SAN-2022-022.
Decision of Greek Data Protection Authority of 21 February 2020 on Public Power Corporation S.A., no. 2/2020.
Decision of Hungarian Data Protection Authority of 3 September 2020, no. NAIH/2020/2204/8.
Decision of Icelandig Data Protection Authority of 31 October 2022, no. 2021061304.
Decision of Norwegian Data Protection Authority of 16 May 2022, no. 20/02875-10 & 20/02875-11.
Decision of Spanish Data Protection Authority of 7 February 2020, no. E-08210-2021.
Decision of Spanish Data Protection Authority of 7 February 2020, no. TD/00318/2019.
Decision of Spanish Data Protection Authority of 28 September 2020, no. TD/00129/2020.
Decision of Spanish Data Protection Authority of 5 January 2021, no. PS/00016/2022.
Decision of Spanish Data Protection Authority of 28 May 2021, no. R/00214/2021.
Decision of Spanish Data Protection Authority of 1 September 2021, no. R/00634/2021.
Decision of Spanish Data Protection Authority of 31 January 2022, no. PD-00099-2022.
Judgement of Berlin Administrative Court of 31 August 2020, no 1 K 90.19. Judgment of CJEU of 17 July 2014, joined cases YS and Others, C-141/12 and C-372/12.
Judgment of CJEU of 20 December 2017, Nowak v. Data Protection Commis- sioner, C-434/16.
Judgment of CJEU of 16 July 2020, Facebook Ireland and Schrems, C-311/18. Judgment of CJEU of 12 January 2023, RW v. Österreichische Post AG, C-154/21.
Judgement of Court of Amsterdam of 11 March 2021, no. C/13/689705/HA RK 20-258.
Judgement of Court of First Instance of the Central Netherlands of 24 March 2021, no. C/16/502323 / HA RK 20-122.
Judgement of District Court Den Haag of 20 April 2022, no. 20/2732.
Judgement of District Court of Central Netherlands of 18 June 2020, no. AWB-20_1431.
Judgement of District Court of Gelderland of 24 September 2020, no. 365592. Judgement of District Court of Midden-Nederland of 12 January 2021, no. UTR 20/268.
Judgement of District Court Rotterdam of 22 March 2021, no. ROT 19/4649. Judgement of District Court of Zeeland-West-Brabant of 1 December 2021, no. AWB- 20_5521.
Judgement of District Court of Amsterdam of 9 April 2020, no. C/13/673049/ HA RK 19-338.
Judgment of ECHR of 23 January1986, Gaskin v. United Kingdom, 10454/86. Judgment of ECHR of 26 March 1987, Leander v. Sweden, 9248/81.
Judgment of ECHR of 6 June 2006, Segerstedt-Wiberg and Others v. Sweden, 62332/00.
Judgment of ECHR of 28 April 2009, K.H. and Others v. Slovakia, 32881/04. Judgement of Financial Court of Munich of 3 February 2022, no. 15 K 1212/19. Opinion of Advocate General Pitruzzella delivered on 9 June 2022 (1), RW v. Österreichische Post AG, C-154/21.
Procurator General of the Dutch Supreme Court of 26 August 2022, no. 22/01253.
License
Copyright (c) 2023 Dominika Kuźnicka-Błaszkowsk
This work is licensed under a Creative Commons Attribution 4.0 International License.