Ireland’s Data Protection Commission advised organizations on data subject access request obligations under Article 15(1) of the EU General Data Protection Regulation. The DPC outlined justifications for consumers to request and obtain access under the law while explaining covered entities can raise restrictions to those rights only when “justified on an evidential basis, reference to the specific context of the case concerned.”
Full story