FiS - 13308-22
Swedish court rules GDPR complainants have party status and can demand decisions.
The Stockholm Administrative Court ruled that individuals filing GDPR complaints have party status and can demand a decision within six months, even if the Data Protection Authority (DPA) is conducting a parallel investigation. This decision upholds the complainant's right to an effective remedy and prevents them from being disadvantaged by the DPA's procedural choices.
AI summary of the linked source. Not reviewed by an editor. How this works
Run IMY?
Get an email when a new story names IMY, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Stockholm Administrative Court affirmed that individuals filing GDPR complaints hold party status, entitling them to a formal decision within six months regardless of any parallel DPA investigation. This ruling highlights a critical procedural obligation: Data Protection Authorities cannot indefinitely defer complainant resolutions by sheltering behind their own investigative timelines. Organizations and DPAs alike must recognize that complainants' rights to effective remedy are legally enforceable, not discretionary. Failure to respect these timelines exposes DPAs to legal challenge and undermines public trust in data protection enforcement. This decision sets a precedent that procedural delays are not a permissible strategy for managing GDPR complaint backlogs.