Article by Dr. Carlo Piltz and Melanie Pradel in the current edition of BvD-News
“It must be ensured that the requested data is not made available to unauthorized third parties. This is to be ensured particularly in cases when information is provided verbally or electronically. If the controller has reasonable doubts concerning the identity of a person requesting information, it may request additional information to confirm the person’s identity in accordance with Article 12(6) of the GDPR.” Dr. Carlo Piltz & Melanie Pradel write about the general duty to verify identity in the latest edition of BVD-News (the industry journal of the German Association of Data Protection Officers).
back