The Bottom Line
- Strategic Defense: Companies facing GDPR access requests that appear to be tactical moves in a separate legal dispute can argue “abuse of process” as a valid reason for dismissal.
- Intent Matters: A Dutch court looked past the formal request to the claimant’s true motive—continuing a long-standing employment grievance—demonstrating that the requester’s broader litigation history is relevant.
- Judicial Limits: This ruling confirms that courts will protect the legal system from being clogged by vexatious litigation disguised as data protection claims, declaring such cases inadmissible.
The Details
This case revolved around a GDPR data subject access request (DSAR) filed by a former municipal employee. The individual, who has been in a protracted dispute with his former employer since his dismissal over a decade ago, requested access to an email exchange between the Dutch Ministry of the Interior and the municipality. He claimed this was to verify the lawful processing of his personal data. However, his true aim was to obtain information he believed would support his ongoing legal battles against the municipality and prove that the Ministry had misinformed Parliament about his case.
The District Court of Limburg dismissed the case without even considering the merits of the GDPR claim, ruling it an “abuse of process” (misbruik van recht). The court concluded that the claimant was not genuinely exercising his data protection rights. Instead, he was weaponizing the GDPR as a tool to continue his old conflict. The court noted that the claimant’s arguments were almost entirely focused on his historical grievances and other legal proceedings, rather than on the specific data processing issues at hand.
Crucially, the court’s decision was reinforced by the claimant’s extensive history of litigation. The court cited several previous rulings where the same individual was found to be systematically initiating legal procedures for improper purposes related to his original dismissal. This established pattern demonstrated that the current GDPR request was not made in good faith but was another chapter in a long-running campaign. The court declared that using legal rights without a reasonable objective, and for a purpose other than that for which they were intended, constitutes an abuse that places an unacceptable burden on the judiciary and the targeted organizations.
Source
Rechtbank Limburg
