ARTICLE · 26 MARCH 2026
On 19 March 2026, the Court of Justice of the European Union (“CJEU”) delivered an important judgment concerning data subject access requests (“DSARs”). In Brillen Rottler GmbH & Co. KG v TC (Case 526/24), the CJEU clarified when a DSAR may be considered “excessive” and an abuse of one’s data protection rights under Article 12(5) GDPR. The CJEU also clarified the limits of data subjects’ right to compensation under Article 82 GDPR.
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
