Official Journal of the European Union

C series

—

C/2025/3035

10.6.2025

(Case C-205/25, Bayerisches Landesamt für Datenschutzaufsicht)

(C/2025/3035)

Language of the case: German

Referring court

Parties to the main proceedings

Applicant: Joachim Lindenberg

Defendant: Bayerisches Landesamt für Datenschutzaufsicht

Questions referred

Is Article 15 of Regulation (EU) 2016/679, read in conjunction with Article 4(7) of Regulation 2016/679, (<span class="oj-super oj-note-tag">1</span>) to be interpreted as meaning that a supervisory authority, as defined in Article 4(21) of Regulation 2016/679 and acting in the context of a complaint procedure initiated by a data subject pursuant to Article 77 of Regulation 2016/679, is at the same time a ‘controller’ within the meaning of Article 15 of Regulation 2016/679, read in conjunction with Article 4(7) of Regulation 2016/679, and is therefore required to grant the data subject access to information on the basis of Article 15 of Regulation 2016/679?

If Question 1 is answered in the affirmative: Is EU law, in particular Article 23 of Regulation 2016/679, to be interpreted as precluding national legislation – such as Article 20(2) of the Bayerisches Datenschutzgesetz (Bavarian Law on Data Protection), the provision at issue in the main proceedings – which excludes, in a blanket manner, rights of access or inspection with respect to files and records of supervisory authorities as defined in Article 4(21) of Regulation 2016/679?

—

Regulation of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1).

—

ELI: http://data.europa.eu/eli/C/2025/3035/oj

ISSN 1977-091X (electronic edition)

—