Persónuvernd- nr. 2019/232
|Persónuvernd- nr. 2019/232|
|Relevant Law:||Article 5(1) GDPR|
|National Case Number:||nr. 2019/232|
|European Case Law Identifier:||n/a|
The Persónuvernd issued a decision on the disclosure of personal data to third party in the context of a recruitment process in line with Article 5(1) GDPR principles.
The complainant applied for a job in a public agency. He asked the government agency to disclose the others applicant's documents. Following the access request, the government agency notified the others applicants. The notification included information concerning the complainant’s request, including personal data. However, the complainant did not consent to share information about his request with the other applicants. Thus, the complainant brought a complaint before the Persónuvernd.
Should data subjects be notifed of an access request which concerns their personal data?
The Persónuvernd considered that since the request concerned the personal data about his fellow applicants, the complainant should have also assumed that the same applicants had the right to know who was granted the access to their personal data. Thus, it was not required to inform nor to ask the consent of the complainant about the disclosure. The Persónuvernd found that the processing was in line with Article 5(1) GDPR principles and its national law.
Add your comments here!
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the original. Please refer to the Icelandic original for more details.