Choose the experimental features you want to try

This document is an excerpt from the EUR-Lex website

Document 62021CA0487

    Case C-487/21, Österreichische Datenschutzbehörde and CRIF: Judgment of the Court (First Chamber) of 4 May 2023 (request for a preliminary ruling from the Bundesverwaltungsgericht — Austria) — F.F. v Österreichische Datenschutzbehörde (Reference for a preliminary ruling — Protection of personal data — Regulation (EU) 2016/679 — Data subject’s right of access to his or her data undergoing processing — Article 15(3) — Provision of a copy of the data — Concept of ‘copy’ — Concept of ‘information’)

    OJ C 216, 19.6.2023, p. 8–9 (BG, ES, CS, DA, DE, ET, EL, EN, FR, GA, HR, IT, LV, LT, HU, MT, NL, PL, PT, RO, SK, SL, FI, SV)

    19.6.2023   

    EN

    Official Journal of the European Union

    C 216/8


    Judgment of the Court (First Chamber) of 4 May 2023 (request for a preliminary ruling from the Bundesverwaltungsgericht — Austria) — F.F. v Österreichische Datenschutzbehörde

    (Case C-487/21, (1) Österreichische Datenschutzbehörde and CRIF)

    (Reference for a preliminary ruling - Protection of personal data - Regulation (EU) 2016/679 - Data subject’s right of access to his or her data undergoing processing - Article 15(3) - Provision of a copy of the data - Concept of ‘copy’ - Concept of ‘information’)

    (2023/C 216/10)

    Language of the case: German

    Referring court

    Bundesverwaltungsgericht

    Parties to the main proceedings

    Applicant: F.F.

    Defendant: Österreichische Datenschutzbehörde

    intervening party: CRIF GmbH

    Operative part of the judgment

    1.

    The first sentence of Article 15(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation),

    must be interpreted as meaning that the right to obtain from the controller a copy of the personal data undergoing processing means that the data subject must be given a faithful and intelligible reproduction of all those data. That right entails the right to obtain copies of extracts from documents or even entire documents or extracts from databases which contain, inter alia, those data, if the provision of such a copy is essential in order to enable the data subject to exercise effectively the rights conferred on him or her by that regulation, bearing in mind that account must be taken, in that regard, of the rights and freedoms of others.

    2.

    The third sentence of Article 15(3) of Regulation 2016/679

    must be interpreted as meaning that the concept of ‘information’ to which it refers relates exclusively to the personal data of which the controller must provide a copy pursuant to the first sentence of that paragraph.


    (1)  OJ C 431, 25.10.2021.


    Top