Summary
- The recent ECJ ruling on data subject access requests (DSARs) brings mixed implications for European employers, confirming that first DSARs cannot be dismissed as abusive solely due to their burdensome nature.
- Countries like Belgium, France, and Germany see rising DSAR usage in employment disputes, with varying degrees of acceptance and scrutiny from data protection authorities.
- Irish employers are urged to enhance their processes for handling DSARs, as the Data Protection Commission emphasizes prompt responses and justifiable redactions.
- The UK is considering amendments that could redefine how DSARs are managed, potentially allowing fees for excessive requests and impacting employers' response strategies amidst increasing AI involvement.
Join the discussion — sign up to comment, upvote, and save articles.