|
By Vincent WELLENS, Partner Aline BLEICHER, Associate NautaDutilh Avocats Luxembourg
In an era of increasingly capable AI agents detecting GDPR non-compliance and cookie consent violations in order to demand compensation, and of data subject access rights (“DSAR”) being weaponised as tactical instruments in employment disputes, financial disagreements or rent reduction proceedings, a ruling handed down on 19 March 2026 by the Court of Justice of the European Union (“CJEU”) is both timely and welcome (Case C-526/24, Brillen Rottler GmbH Co. KG v TC).
The CJEU clarified that EU law cannot be invoked for abusive or fraudulent purposes and, in particular, that even a first DSAR can be rejected as abusive...
|