Brillen Rottler: A German optician fights back against 'abusive' DSARs

Are you seeing a rise in "copy-paste" Data Subject Access Requests (DSARs) designed primarily to extract a quick financial settlement?

In this episode of the Privacy Partnership Podcast, Robert Bateman unpacks a highly practical new judgment from the Court of Justice of the European Union (CJEU) that offers controllers a potential shield against abusive access requests.

Looking at the facts of Case C-526/24 (Brillen Rottler GmbH & Co. KG v TC), Robert explores the legal boundaries of Article 12(5) and Article 82 of the GDPR, explaining how privacy teams might finally be able to push back against serial compensation claims—and the evidentiary hurdles they will face in doing so.