Format: Keynote · Required preknowledge: Intermediate · Room: EG03
Time: TBD
Topics: Data Protection & Privacy
The right of access under Article 15 GDPR has become a central part of privacy practice — but its precise scope continues to evolve through case law. Recent decisions are further shaping what controllers need to provide and how access requests can be handled in practice.
This session examines recent legal developments, including the CJEU’s Brillen Rottler case and the OVG Saarland judgment of 13 May 2025, and connects them with the operational reality of responding to access requests. It will explore how DSAR and self-service tools can support controllers, what legal and practical requirements such solutions need to meet, and where current German and EU case law still leaves open questions.
Speakers: Mirjam Lück, Susan Lipeyko