Data requests to support compensation claims can be refused
Businesses that can determine that someone has filed a data subject access request (DSAR) for the purpose of artificially creating the conditions in which they might bring a compensation claim against them can refuse to share the data requested with those individuals, even if it is the first DSAR received from the individuals, the EU’s highest court has ruled.
