Germany’s highest court widens the scope of data subject access requests in Germany
Germany’s highest civil court, the Federal Court Of Justice, has published a decision specifying the scope of data subject access requests (DSARs).
The FCJ held that Article 15 of the EU General Data Protection Regulation (GDPR) has a broader scope than previously understood in Germany. Pursuant to the court’s decision, Article 15 GDPR also covers information already known about the data subject, previous correspondence and notes of internal processes or internal communications related to the data subject.
