{"id":32054,"date":"2026-03-23T09:00:00","date_gmt":"2026-03-23T07:00:00","guid":{"rendered":"https:\/\/kpw.law\/?p=32054"},"modified":"2026-05-01T14:05:21","modified_gmt":"2026-05-01T12:05:21","slug":"limit-for-abusive-gdpr-requests","status":"publish","type":"post","link":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/","title":{"rendered":"Limit for abusive GDPR requests"},"content":{"rendered":"\n<div class=\"wp-block-group alignfull v4-pattern-hero v4-pattern-hero--post is-style-background-blend is-style-arrow has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-cover alignfull is-light v4-pattern-hero__cover\" style=\"padding-top:var(--wp--preset--spacing--80);padding-bottom:var(--wp--preset--spacing--80);min-height:75vh;aspect-ratio:unset;\"><img data-dominant-color=\"33d8d6\" data-has-transparency=\"false\" loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" sizes=\"auto, 100vw\" class=\"wp-block-cover__image-background wp-image-32052 size-large not-transparent\" alt=\"Grenze f\u00fcr missbr\u00e4uchliche DSGVO-Anfragen, Auskunftsanspruch, Datenschutzrecht, DSGVO, Rechtsanwalt\" src=\"https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg\" style=\"--dominant-color: #33d8d6; object-position:0% 100%\" data-object-fit=\"cover\" data-object-position=\"0% 100%\" srcset=\"https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg 1024w, https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-300x169.jpg 300w, https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-768x432.jpg 768w, https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1536x864.jpg 1536w, https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-2048x1152.jpg 2048w\" \/><span aria-hidden=\"true\" class=\"wp-block-cover__background has-base-background-color has-background-dim-0 has-background-dim\"><\/span><div class=\"wp-block-cover__inner-container has-global-padding is-layout-constrained wp-block-cover-is-layout-constrained\">\n<div style=\"height:5em\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-group alignwide has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-1d4b5d69 wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--80);padding-top:var(--wp--preset--spacing--60)\">\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-19e250f3 wp-block-group-is-layout-constrained\">\r\n<h1 id=\"multirow-headline-block_8bee4ca6a44d0d446c12a4b4b0c6eb10\" class=\"wp-block-visual4-multirow-headline\">\r\n    <div class=\"wp-block-visual4-multirow-headline\">\n\n<p class=\"has-gigantic-font-size\" style=\"margin-top:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:1;text-transform:uppercase\">Limit for<\/p>\n\n\n\n<p class=\"has-text-align-left has-huge-font-size\" style=\"margin-top:0;margin-right:0;margin-bottom:0;margin-left:15%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:1;text-transform:uppercase\">abusive<\/p>\n\n\n\n<p class=\"has-contrast-color has-text-color has-link-color has-huge-font-size wp-elements-556f92e3b70891daa80347614c704266\" style=\"margin-top:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:1;text-transform:uppercase\"><span class=\"v4-marker-highlight-background\">GDPR requests<\/span>.<\/p>\n\n<\/div> \r\n<\/h1>\n\n\n<div class=\"wp-block-group has-small-font-size is-nowrap is-layout-flex wp-container-core-group-is-layout-76c96157 wp-block-group-is-layout-flex\" style=\"margin-top:var(--wp--preset--spacing--20);margin-bottom:0;padding-top:0;padding-bottom:0;font-style:italic;font-weight:300;text-transform:uppercase\"><div style=\"font-style:italic;font-weight:300;text-transform:uppercase;\" class=\"wp-block-post-date has-small-font-size\"><time datetime=\"2026-03-23T09:00:00+02:00\">23. March 2026<\/time><\/div>\n\n\n<p>of<\/p>\n\n\n<div style=\"font-style:italic;font-weight:600;\" class=\"wp-block-post-author-name\">Clemens Pfitzer<\/div><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignwide has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-c93ec0be wp-block-group-is-layout-constrained\">\n<p><strong>Can a company reject a request for information under the GDPR as an abuse of rights from the very first request?<\/strong> <strong>When does a company owe damages if it refuses to provide information?<\/strong> <strong>Is the mere suspicion that someone is systematically making data protection requests enough to provoke claims for damages?<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n\n<h2 class=\"wp-block-heading\" id=\"h-worum-geht-es\">What is it about?<\/h2>\n\n<p>In March 2023, a private individual living in Austria signed up for the newsletter of a German optician company. Just 13 days later, she submitted a request for information under <a href=\"https:\/\/kpw.law\/rechtsgebiet\/datenschutzrecht\/\" id=\"272\">data protection law<\/a> as she wanted to know what personal data the company was processing about her. The optician company refused to provide the information and described the request as an abuse of rights. The reasoning: It was apparent from publicly accessible sources, blog posts and reports that the individual was following the same pattern with numerous other companies: Signing up for a newsletter, then requesting information, then claiming damages. When the person pursued their claim and demanded an additional 1,000 euros in damages, the company turned to the Arnsberg District Court. The court referred the case to the European Court of Justice.     <\/p>\n\n<h2 class=\"wp-block-heading\">Legal background<\/h2>\n\n<p>Data protection law grants every person the law to find out from a company what <a href=\"https:\/\/kpw.law\/en\/topics\/personal-data-in-data-protection\/\" id=\"23746\">personal data<\/a> about them is being processed. In principle, this right to information must be fulfilled free of charge. However, the GDPR stipulates that a controller can refuse to provide information if a request is &#8220;manifestly unfounded or excessive&#8221;. The law explicitly mentions frequent repetition as an example. But what applies if it is a first request? And what claims for damages arise in the event of a refusal to provide information?     <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-die-entscheidung-des-eugh\">The ECJ&#8217;s decision<\/h2>\n\n<p>With its  <a href=\"https:\/\/infocuria.curia.europa.eu\/tabs\/document\/C\/2024\/C-0526-24-00000000RP-01-P-01-3438727\/ARRET\/317915-DE-1-html\">Judgment of 19.03.2026 &#8211; Ref. C-526\/24 <\/a>  answered three key legal questions.  <\/p>\n\n<p>Firstly, the Court clarified that even an initial request for access can be classified as excessive within the meaning of the GDPR &#8211; if the controller proves that the request does not serve the actual purpose of the right of access, namely to enable the individual to control the processing of their data and protect their laws. Instead, a request may be excessive if it was made with abusive intent, for example to artificially create the conditions for a claim for damages. Publicly available information showing that the same person has followed the same pattern with many other companies may be taken into account.  <\/p>\n\n<div class=\"wp-block-group v4-pattern-general-quote-box has-secondary-background-color has-background has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"margin-top:var(--wp--preset--spacing--60);margin-bottom:var(--wp--preset--spacing--60)\">\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\" style=\"padding-right:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--70)\">\n<p>A first request for access to personal data made by the data subject to the controller may be considered &#8220;excessive&#8221; if the controller proves that this request was made with abusive intent, for example to artificially create the conditions for obtaining an advantage.<\/p>\n<\/blockquote>\n<\/div>\n\n<p>Secondly, the ECJ affirmed that the GDPR gives rise to claims for damages even if no actual data processing has taken place. Even the infringement of the right to information, i.e. the unlawful refusal to provide information, can constitute compensable damage. This is significant insofar as companies can therefore also be liable for not responding to data protection requests.  <\/p>\n\n<p>Thirdly, the ECJ clarified that the loss of control over one&#8217;s own data or uncertainty about data processing can constitute non-material damage. However, this must actually be proven. A mere assertion is not sufficient and the causal link may be broken if the data subject has caused the damage themselves through their own conduct.  <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-was-bedeutet-das-fur-unternehmen\">What does this mean for companies?<\/h2>\n\n<p>The ruling has considerable practical significance. On the one hand, it protects companies from systematic abuse of the right to information. Anyone who can prove that an applicant always follows the same pattern and systematically generates claims for damages can also reject an initial application. On the other hand, caution is required. The burden of proof lies with the company and the hurdle is high. General assumptions are not enough. Companies should therefore always respond to requests for information in a timely manner and only claim abuse in well-documented exceptional cases.      <\/p>\n\n<p>It is also particularly important to clarify that an unlawful refusal to provide information can result in compensation for damages, even if no data has been processed. Companies should review their internal processes for dealing with data protection requests and ensure that they are processed correctly and in good time. <\/p>\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n<div class=\"wp-block-columns v4-pattern-text-copy-half-col is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p>The ECJ ruling protects companies from a form of abusive use of data protection law that has already caused considerable expense and financial damage in practice.  <\/p>\n\n\n\n<p>Nevertheless, the boundary between the legitimate exercise of the right to information and abuse remains fluid. The court expressly emphasized that the intention to abuse must be proven in each individual case.   <\/p>\n\n\n\n<p>The reassuring message for companies is that anyone who can provide proof does not have to comply with the first request. In addition, requests for information must be taken seriously and responded to in a timely manner. <\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<\/div>\n<\/div>\n\n<div class=\"wp-block-group alignwide has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"margin-top:var(--wp--preset--spacing--80);margin-bottom:var(--wp--preset--spacing--80)\">\n<div style=\"height:50px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-group alignwide v4-pattern-cta-box has-secondary-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-a7c0d175 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0\">\n<div class=\"wp-block-columns alignwide are-vertically-aligned-top v4-pattern-cta-box__columns is-layout-flex wp-container-core-columns-is-layout-ec2e7a44 wp-block-columns-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-column is-vertically-aligned-top v4-pattern-cta-box__columns-column is-layout-flow wp-container-core-column-is-layout-bce6ca70 wp-block-column-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--50);padding-bottom:0;flex-basis:60%\">\n<div class=\"wp-block-group alignwide has-global-padding is-content-justification-right is-layout-constrained wp-container-core-group-is-layout-5c12a1d1 wp-block-group-is-layout-constrained\">\r\n<div id=\"multirow-headline-block_58468876daee635e1280becc73109e0c\" class=\"wp-block-visual4-multirow-headline alignwide\">\r\n    <div class=\"wp-block-visual4-multirow-headline\">\n\n<p class=\"has-text-align-left has-huge-font-size\" style=\"margin-top:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:1;text-transform:uppercase\">We are happy to<\/p>\n\n\n\n<p class=\"has-text-align-left has-x-large-font-size\" style=\"margin-top:0;margin-right:0;margin-bottom:0;margin-left:8%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:0.9;text-transform:uppercase\">advise you about<\/p>\n\n\n\n<p class=\"has-text-align-left has-huge-font-size\" style=\"margin-top:0;margin-right:0;margin-bottom:0;margin-left:0%;padding-top:0;padding-bottom:0;font-style:normal;font-weight:1000;line-height:0.9;text-transform:uppercase\">Data protection law!<\/p>\n\n<\/div> \r\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-5c3c14bb wp-block-group-is-layout-flex\" style=\"margin-top:var(--wp--preset--spacing--30);margin-bottom:var(--wp--preset--spacing--30)\">\r\n\r\n<div class=\"wp-block-visual4-contact-modal__button\">\r\n            \r\n        <div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\r\n            \r\n\r\n<div class=\"wp-block-button v4-contact-modal-button is-style-fill\" style=\"font-style:normal;font-weight:600\" data-form-id=\"8\"><a class=\"wp-block-button__link has-contrast-color has-base-background-color has-text-color has-background has-link-color wp-element-button\">Contact form<\/a><\/div>\r\n\r\n        <\/div>\r\n        \r\n    <\/div>\n\n\n<div class=\"wp-block-buttons is-style-mobile-only is-content-justification-left is-layout-flex wp-container-core-buttons-is-layout-fc4fd283 wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-arrow is-style-fill\"><a class=\"wp-block-button__link has-base-background-color has-background wp-element-button\" href=\"tel:4971141019030\" style=\"padding-right:var(--wp--preset--spacing--50);padding-left:var(--wp--preset--spacing--50);font-style:normal;font-weight:600\">Call now!<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top v4-pattern-cta-box__columns-column v4-pattern-cta-box__columns-column--image is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:40%\">\n<figure class=\"wp-block-image size-full v4-pattern-cta-box__columns-column__image\"><img decoding=\"async\" src=\"https:\/\/kpw.law\/wp-content\/themes\/kpw-law\/assets\/samples\/person-cropped.png\" alt=\"\" class=\"wp-image-23155\" \/><\/figure>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>ECJ: Even a first GDPR request for information can be abusive. Refusal to provide information triggers compensation &#8211; even without data processing. <\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4904],"tags":[6277,5110,5108,258,5460,5606,5085],"thema":[],"rechtsgebiet":[4940],"produkt":[],"class_list":["post-32054","post","type-post","status-publish","format-standard","hentry","category-general","tag-abusive-prosecution","tag-data-protection","tag-data-protection-law","tag-datenschutz","tag-gdpr","tag-right-to-information","tag-right-to-information-under-data-protection-law","rechtsgebiet-data-protection-law"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.5 (Yoast SEO v27.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>ECJ: Limit for abusive GDPR requests<\/title>\n<meta name=\"description\" content=\"ECJ: Even a first GDPR request for information can be abusive. Refusal to provide information triggers compensation - even without data processing.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Limit for abusive GDPR requests\" \/>\n<meta property=\"og:description\" content=\"ECJ: Even a first GDPR request for information can be abusive. Refusal to provide information triggers compensation - even without data processing.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/\" \/>\n<meta property=\"og:site_name\" content=\"KPW Rechtsanw\u00e4lte und Fachanw\u00e4lte\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-23T07:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-01T12:05:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Clemens Pfitzer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@clemenspfitzer\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Clemens Pfitzer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/\"},\"author\":{\"name\":\"Clemens Pfitzer\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#\\\/schema\\\/person\\\/bb7a5be61de17c2c027e254e249214bd\"},\"headline\":\"Limit for abusive GDPR requests\",\"datePublished\":\"2026-03-23T07:00:00+00:00\",\"dateModified\":\"2026-05-01T12:05:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/\"},\"wordCount\":818,\"publisher\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg\",\"keywords\":[\"abusive prosecution\",\"Data protection\",\"Data protection law\",\"Datenschutz\",\"GDPR\",\"Right to information\",\"Right to information under data protection law\"],\"articleSection\":[\"General\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/\",\"url\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/\",\"name\":\"ECJ: Limit for abusive GDPR requests\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg\",\"datePublished\":\"2026-03-23T07:00:00+00:00\",\"dateModified\":\"2026-05-01T12:05:21+00:00\",\"description\":\"ECJ: Even a first GDPR request for information can be abusive. Refusal to provide information triggers compensation - even without data processing.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg\",\"contentUrl\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/limit-for-abusive-gdpr-requests\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/kpw.law\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Limit for abusive GDPR requests\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/kpw.law\\\/en\\\/\",\"name\":\"KPW PartmbB \u2013 Rechtsanw\u00e4lte und Fachanw\u00e4lte\",\"description\":\"Rechtsanw\u00e4lte f\u00fcr IP- und IT-Recht\",\"publisher\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#organization\"},\"alternateName\":\"kpw.law\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kpw.law\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#organization\",\"name\":\"KPW PartmbB\",\"alternateName\":\"KPW\",\"url\":\"https:\\\/\\\/kpw.law\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/KPW400x400.jpg\",\"contentUrl\":\"https:\\\/\\\/kpw.law\\\/wp-content\\\/uploads\\\/KPW400x400.jpg\",\"width\":400,\"height\":400,\"caption\":\"KPW PartmbB\"},\"image\":{\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/kpw\"],\"description\":\"KPW ist eine auf IP und IT-Recht spezialisierte Kanzlei mit Rechts- und Fachanw\u00e4lten in Stuttgart. KPW ber\u00e4t Unternehmen in den Bereichen Wettbewerbsrecht, Markenrecht, Designrecht, Urheberrecht, IT-Recht, Patentrecht, Datenschutzrecht, E-Commerce und Know-How-Schutz.\",\"email\":\"info@kpw.law\",\"telephone\":\"+4971141019030\",\"legalName\":\"KPW PartmbB\",\"foundingDate\":\"2010-04-01\",\"vatID\":\"DE270757792\",\"duns\":\"341580247\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"1\",\"maxValue\":\"10\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kpw.law\\\/en\\\/#\\\/schema\\\/person\\\/bb7a5be61de17c2c027e254e249214bd\",\"name\":\"Clemens Pfitzer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g\",\"caption\":\"Clemens Pfitzer\"},\"description\":\"Rechtsanwalt, Fachanwalt f\u00fcr gewerblichen Rechtsschutz und Fachanwalt f\u00fcr IT-Recht, t\u00e4tig in den Bereichen Markenrecht, Wettbewerbsrecht, Urheberrecht, Designrecht, Know-How-Schutz, Patentrecht, IT-Recht, E-Commerce, Datenschutz\",\"sameAs\":[\"https:\\\/\\\/kpw.law\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/pfitzer\\\/\",\"https:\\\/\\\/x.com\\\/clemenspfitzer\"],\"gender\":\"m\u00e4nnlich\",\"knowsAbout\":[\"Markenrecht\",\"Wettbewerbsrecht\",\"Designrecht\",\"Urheberrecht\",\"E-Commerce\",\"Datenschutzrecht\",\"Patentrecht\",\"IT-Recht\",\"Softwarelizenzen\",\"Gesch\u00e4ftsgeheimnisse\"],\"knowsLanguage\":[\"Englisch\",\"Deutsch\"],\"jobTitle\":\"Rechtsanwalt, Fachanwalt f\u00fcr gewerblichen Rechtsschutz, Fachanwalt f\u00fcr IT-Recht\",\"worksFor\":\"KPW PartmbB\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"ECJ: Limit for abusive GDPR requests","description":"ECJ: Even a first GDPR request for information can be abusive. Refusal to provide information triggers compensation - even without data processing.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/","og_locale":"en_US","og_type":"article","og_title":"Limit for abusive GDPR requests","og_description":"ECJ: Even a first GDPR request for information can be abusive. Refusal to provide information triggers compensation - even without data processing.","og_url":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/","og_site_name":"KPW Rechtsanw\u00e4lte und Fachanw\u00e4lte","article_published_time":"2026-03-23T07:00:00+00:00","article_modified_time":"2026-05-01T12:05:21+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-scaled.jpg","type":"image\/jpeg"}],"author":"Clemens Pfitzer","twitter_card":"summary_large_image","twitter_creator":"@clemenspfitzer","twitter_misc":{"Written by":"Clemens Pfitzer","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/#article","isPartOf":{"@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/"},"author":{"name":"Clemens Pfitzer","@id":"https:\/\/kpw.law\/en\/#\/schema\/person\/bb7a5be61de17c2c027e254e249214bd"},"headline":"Limit for abusive GDPR requests","datePublished":"2026-03-23T07:00:00+00:00","dateModified":"2026-05-01T12:05:21+00:00","mainEntityOfPage":{"@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/"},"wordCount":818,"publisher":{"@id":"https:\/\/kpw.law\/en\/#organization"},"image":{"@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/#primaryimage"},"thumbnailUrl":"https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg","keywords":["abusive prosecution","Data protection","Data protection law","Datenschutz","GDPR","Right to information","Right to information under data protection law"],"articleSection":["General"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/","url":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/","name":"ECJ: Limit for abusive GDPR requests","isPartOf":{"@id":"https:\/\/kpw.law\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/#primaryimage"},"image":{"@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/#primaryimage"},"thumbnailUrl":"https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg","datePublished":"2026-03-23T07:00:00+00:00","dateModified":"2026-05-01T12:05:21+00:00","description":"ECJ: Even a first GDPR request for information can be abusive. Refusal to provide information triggers compensation - even without data processing.","breadcrumb":{"@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/#primaryimage","url":"https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg","contentUrl":"https:\/\/kpw.law\/wp-content\/uploads\/Grenze-fuer-missbraeuchliche-DSGVO-Anfragen-1024x576.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kpw.law\/en\/limit-for-abusive-gdpr-requests\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/kpw.law\/en\/"},{"@type":"ListItem","position":2,"name":"Limit for abusive GDPR requests"}]},{"@type":"WebSite","@id":"https:\/\/kpw.law\/en\/#website","url":"https:\/\/kpw.law\/en\/","name":"KPW PartmbB \u2013 Rechtsanw\u00e4lte und Fachanw\u00e4lte","description":"Rechtsanw\u00e4lte f\u00fcr IP- und IT-Recht","publisher":{"@id":"https:\/\/kpw.law\/en\/#organization"},"alternateName":"kpw.law","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kpw.law\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kpw.law\/en\/#organization","name":"KPW PartmbB","alternateName":"KPW","url":"https:\/\/kpw.law\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kpw.law\/en\/#\/schema\/logo\/image\/","url":"https:\/\/kpw.law\/wp-content\/uploads\/KPW400x400.jpg","contentUrl":"https:\/\/kpw.law\/wp-content\/uploads\/KPW400x400.jpg","width":400,"height":400,"caption":"KPW PartmbB"},"image":{"@id":"https:\/\/kpw.law\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/kpw"],"description":"KPW ist eine auf IP und IT-Recht spezialisierte Kanzlei mit Rechts- und Fachanw\u00e4lten in Stuttgart. KPW ber\u00e4t Unternehmen in den Bereichen Wettbewerbsrecht, Markenrecht, Designrecht, Urheberrecht, IT-Recht, Patentrecht, Datenschutzrecht, E-Commerce und Know-How-Schutz.","email":"info@kpw.law","telephone":"+4971141019030","legalName":"KPW PartmbB","foundingDate":"2010-04-01","vatID":"DE270757792","duns":"341580247","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"1","maxValue":"10"}},{"@type":"Person","@id":"https:\/\/kpw.law\/en\/#\/schema\/person\/bb7a5be61de17c2c027e254e249214bd","name":"Clemens Pfitzer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dc1ba1c2897d08484345b3e1c9524bf03ed6b3ef6bf06ef8b3f8811c1fb6c38e?s=96&d=mm&r=g","caption":"Clemens Pfitzer"},"description":"Rechtsanwalt, Fachanwalt f\u00fcr gewerblichen Rechtsschutz und Fachanwalt f\u00fcr IT-Recht, t\u00e4tig in den Bereichen Markenrecht, Wettbewerbsrecht, Urheberrecht, Designrecht, Know-How-Schutz, Patentrecht, IT-Recht, E-Commerce, Datenschutz","sameAs":["https:\/\/kpw.law","https:\/\/www.linkedin.com\/in\/pfitzer\/","https:\/\/x.com\/clemenspfitzer"],"gender":"m\u00e4nnlich","knowsAbout":["Markenrecht","Wettbewerbsrecht","Designrecht","Urheberrecht","E-Commerce","Datenschutzrecht","Patentrecht","IT-Recht","Softwarelizenzen","Gesch\u00e4ftsgeheimnisse"],"knowsLanguage":["Englisch","Deutsch"],"jobTitle":"Rechtsanwalt, Fachanwalt f\u00fcr gewerblichen Rechtsschutz, Fachanwalt f\u00fcr IT-Recht","worksFor":"KPW PartmbB"}]}},"_links":{"self":[{"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/posts\/32054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/comments?post=32054"}],"version-history":[{"count":4,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/posts\/32054\/revisions"}],"predecessor-version":[{"id":32871,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/posts\/32054\/revisions\/32871"}],"wp:attachment":[{"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/media?parent=32054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/categories?post=32054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/tags?post=32054"},{"taxonomy":"thema","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/thema?post=32054"},{"taxonomy":"rechtsgebiet","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/rechtsgebiet?post=32054"},{"taxonomy":"produkt","embeddable":true,"href":"https:\/\/kpw.law\/en\/wp-json\/wp\/v2\/produkt?post=32054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}