A city receives an access request and redacts other residents’ personal data from the response before disclosing the requester’s information. Why is that approach appropriate?
Select an answer to reveal the explanation.
Short Explanation
Your access right is about your data—not a backstage pass to the whole neighbourhood. Black out the other residents’ details, then hand over what is yours. That is how you honour access without steamrolling everyone else.
Full Explanation
Article 15 confirms that the right of access must not adversely affect the rights and freedoms of others. Controllers—including public bodies—should therefore disclose the requester’s personal data while redacting or otherwise protecting third parties’ personal data where disclosure would harm those rights. Balancing access with others’ privacy is part of compliant fulfilment.