German court ruled that protection of the whistle-blower confidentiality does not generally override the data subject access right
A mid-level German employment court recently had to consider the scope of subject access requests under the EU General Data Protection Regulation (GDPR) in the context of compliance and whistle-blowing regimes.
The Regional Labour Court ( Landesarbeitsgericht ) of Stuttgart decided that an employer was required not only to provide an employee with the records containing performance and behavioural data, but also to disclose information regarding internal investigations.
