Persónuvernd- nr. 2019/232
|Persónuvernd (Iceland) - nr. 2019/232|
|Relevant Law:||Article 5(1) GDPR|
Article 15 GDPR
|National Case Number/Name:||nr. 2019/232|
|European Case Law Identifier:||n/a|
|Original Source:||Persónuvernd (in IS)|
The Persónuvernd issued a decision on the disclosure of personal data to third party in the context of a recruitment process in line with Article 5(1) GDPR principles.
English Summary[edit | edit source]
Facts[edit | edit source]
The complainant applied for a job in a public agency. He asked the government agency to disclose the others applicant's documents. Following the access request, the government agency notified the others applicants. The notification included information concerning the complainant’s request, including personal data. However, the complainant did not consent to share information about his request with the other applicants. Thus, the complainant brought a complaint before the Persónuvernd.
Dispute[edit | edit source]
Should data subjects be notifed of an access request which concerns their personal data?
Holding[edit | edit source]
The Persónuvernd considered that since the request concerned the personal data about his fellow applicants, the complainant should have also assumed that the same applicants had the right to know who was granted the access to their personal data. Thus, it was not required to inform nor to ask the consent of the complainant about the disclosure. The Persónuvernd found that the processing was in line with Article 5(1) GDPR principles and its national law.
Comment[edit | edit source]
Add your comments here!
Further Resources[edit | edit source]
Share blogs or news articles here!
English Machine Translation of the Decision[edit | edit source]
The decision below is a machine translation of the original. Please refer to the Icelandic original for more details.