How to obtain information regarding your data processing?

Request to data user

You have the right to request the person or institution that processed your medical data for the following information:

  • the kind of data that has been collected about you
  • the person or entity to which your information has been disclosed
  • the purpose, legal basis and method of the processing of your data

Read more about access to your personal data.

Appeal to Data Protection Inspectorate

If the data user has refused to provide you with the information requested, you have the right to appeal to the Data Protection Inspectorate. In your application you should indicate:

  • the kind of action that you expect from the person
  • if possible, the relevant provisions of the law which have been violated
  • arguments as to why the data user should have fulfilled your request
  • and include relevant documents that substantiate your opinion, if there are any

Appeal to Administrative court

If you are not satisfied with the decision taken by the Data Protection Inspectorate, you can challenge the decision in the Administrative court and additionally ask for compensation due to the refusal of the Data Protection Inspectorate. You can learn more about how to prepare your application and other requirements as well in the Code of Administrative Court Procedure.

The Administrative court will assess whether the data user has acted lawfully and, if necessary, may oblige the Data Protection Inspectorate to order the data user to provide access to information regarding your medical data. The court may also order compensation if you have requested it.


Last updated 08/06/2019