This is the new MLex platform. Existing customers should continue to use the existing MLex platform until migrated.
For any queries, please contact Customer Services or your Account Manager. Dismiss

GDPR access requests can be refused only when abuse is demonstrated, EU judges say

( March 19, 2026, 08:50 GMT | Official Statement) -- MLex Summary: Companies may refuse data access requests under the EU’s General Data Protection Regulation only when they can demonstrate abusive intent, the bloc’s top court ruled, largely endorsing an opinion from September by Advocate General Maciej Szpunar, saying that such refusals must remain exceptional and narrowly justified.The press release is attached. The case number is C-526/24 Brillen Rottler....

Prepare for tomorrow’s regulatory change, today

MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.


Know what others in the room don’t, with features including:

  • Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
  • Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
  • Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
  • Curated case files bringing together news, analysis and source documents in a single timeline

Experience MLex today with a 14-day free trial.

Start Free Trial

Already a subscriber? Click here to login