In an article for Law360, London Partner Rob Dalling examines the European Court of Justice's recent ruling in Brillen Rottler GmbH & Co. KG v. TC, which provides important clarification on when businesses are entitled to decline to respond to a data subject access request under GDPR. Rob sets out the background to the decision, analyses the court's findings, and identifies key takeaways for businesses and lawyers.
Rob discusses how the judgment confirms that even a first DSAR may, in certain circumstances, be treated as excessive or abusive, particularly where the data subject's motivation is not to genuinely exercise their data protection rights, but to manufacture a basis for a compensation claim. He notes that businesses may rely on publicly available information about a data subject's conduct to support a decision to decline, but stresses that the burden of proof rests with the data controller and that a proper evidential record must be maintained. He also highlights the court's confirmation that data subjects acting in bad faith may be found to have broken the causal link required to sustain a compensation claim.
Rob has significant experience in data privacy matters, having acted for clients in regulatory enforcement action before the UK Information Commissioner's Office, as well as advising on a wide range of data privacy issues including DSARs, data privacy notices, and international data transfer issues.
Related Lawyers
Related Locations
© 2026 Jenner & Block LLP. Attorney Advertising. Jenner & Block LLP is an Illinois Limited Liability Partnership including professional corporations. This publication, presentation, or event is not intended to provide legal advice but to provide information on legal matters and/or firm news of interest to our clients and colleagues. Readers or attendees should seek specific legal advice before taking any action with respect to matters mentioned in this publication or at this event. The attorney responsible for this communication is Brent E. Kidwell, Jenner & Block LLP, 353 N. Clark Street, Chicago, IL 60654-3456. Prior results do not guarantee a similar outcome. Jenner & Block London LLP, an affiliate of Jenner & Block LLP, is a limited liability partnership established under the laws of the State of Delaware, USA and is authorised and regulated by the Solicitors Regulation Authority with SRA number 615729. Information regarding the data we collect and the rights you have over your data can be found in our Privacy Notice. For further inquiries, please contact dataprotection@jenner.com.