On March 19, 2026, the Court of Justice of the European Union (CJEU) delivered its judgment in Case C‑526/24 (Brillen Rottler), addressing a preliminary reference from the District Court Arnsberg (Germany). The case involves a phenomenon colloquially known as “GDPR hopping” — where individuals sign up for services (such as newsletters), promptly submit data access requests under Article 15 GDPR, and then claim non-material damages under Article 82(1) GDPR when the controller fails to comply or responds inadequately.
CJEU: First Request for Access May Be Rejected as Abusive Under GDPR