Former employees, customers or applicants request access to the data stored about them and copies of it, often in connection with another dispute, for example after a dismissal. Sometimes they also claim damages.
What matters now
- Access must generally be provided within one month; an extension is only possible exceptionally and with reasons.
- Silence is not a solution: late or incomplete answers can trigger claims of their own and complaints to the supervisory authority.
- All systems are included, such as email, customer management, personnel files and service providers. The data protection officer should be involved.
- The rights of third parties and trade secrets may be protected.
- Not every breach leads to damages; the claim deserves its own review.
Documents I need
- the letter with the date of receipt
- the record of processing activities, if available
- indications of an ongoing dispute with the same person
- previous answers and the name of the data protection officer
Next steps
Send me the documents by email to kanzlei@bauer.legal or use the appointment request, and mention any deadline that is running. I usually reply within one working day and let you know how things can proceed. You can write to me in English or German. If the deadline is close, it is best to call: +49 33365 784007. How we work together and how fees are charged is explained under How we work together.
More: IT law.
This page gives a general overview of German law and does not replace advice on the individual case.