Last Update: 04/05/2026 at 2:50 PM EST
CJEU Tightens GDPR Notice And Access Rules
Coverage from ICTRecht, Ropesgray, and others
Articles
5
Latest Article
03/23
Active Days
29
Executive Summary
EU courts tighten GDPR transparency and access rules, covering bodycam notices and limits on abusive subject access requests
- Body-worn cameras in Swedish public transport were held to trigger GDPR Article 13 duties
- The Court said camera observation can count as data collected directly from the filmed person
- Layered notice is allowed if key information is given through signs and accessible channels
- The ruling warns against covert surveillance and reinforces transparency for video monitoring
- The CJEU held that a first subject access request can be excessive under Article 12(5)
- Controllers may refuse manifestly unfounded or excessive requests if they prove abusive intent
- Article 82 compensation still requires actual damage and a causal link
Quick Facts
- What: Tightened GDPR notice and access request rules
- Where: European Union, including Swedish and Dutch cases
- Why: To reinforce transparency and curb abusive rights use
- Who: CJEU, controllers, and data subjects
- When: March 2026 rulings and related appeals

