
Simple facts…
In 2018, an employee requested access to and a copy of all their personal data processed by the employer during the past decade (this is pursuant to the data subject’s right of access enshrined in art. 15 (1) and (3) of the European General Data Protection Regulation (“GDPR”)). The employee considered the response unsatisfying and filed a complaint with the Belgian Data Protection Authority (“DPA”). The DPA issued a decision on February 9, 2021 (the “Decision”).