When Can a GDPR Data Access Request Be Refused as Abusive? The CJEU Clarifies the Limits of Article 15 GDPR
On March 19, 2026, the Court of Justice of the European Union (CJEU) issued an important ruling clarifying when a data subject access request (DSAR) may be refused because it constitutes an abuse of rights under the General Data Protection Regulation (GDPR). The decision CJEU, Case C-526/24, Brillen Rottler addresses a situation that has increasingly […]