The Bottom Line
- Legal Claims Trump Erasure: A company can lawfully refuse a GDPR right to be forgotten request if the personal data is necessary for the establishment, exercise, or defense of legal claims.
- The Litigation Shield: This exception covers the entire duration of legal proceedings, including appeals. The relevance of the data to the lawsuit is the critical factor, even if the data is old.
- Process Matters: Even if your legal position is correct, a flawed and delayed decision-making process can result in your company being ordered to pay the other party’s legal costs. Ensure timely and well-documented responses to all data subject requests.
The Details
This case centered on a request made by a former police interpreter to have five specific documents containing his personal data, dating from 2004 to 2011, erased from all police systems. The request was filed under Article 17 of the GDPR, commonly known as the right to be forgotten. The situation was complicated by the fact that the individual was simultaneously involved in a separate civil lawsuit against the police concerning his removal from their interpreter database. After significant delays, the police ultimately refused to erase the data from all their systems, leading to this judgment.
The core legal issue was a direct conflict between an individual’s right to have their data deleted and an organization’s need to retain information for legal defense. The police argued that the exception under Article 17(3)(e) of the GDPR applied. This provision explicitly states that the right to erasure does not apply when data processing is necessary for the establishment, exercise, or defense of legal claims. Since the documents in question were being used in the ongoing civil proceedings, which had escalated to the Supreme Court, the police contended they had a legitimate and overriding reason to retain them.
The District Court ultimately agreed with the police on the substantive legal grounds. The judgment confirms that the need to defend against a legal claim is a powerful exception to the right to erasure. The court found that because the documents played a role in the civil procedure, the police were justified in retaining them for the duration of that litigation. The individual’s claim that the data was old and should have already been destroyed was dismissed, with the court reinforcing that the legal claims exception takes precedence. While the court annulled the police’s formal decision due to procedural errors and unreasonable delays—ordering them to pay the claimant’s legal fees—it upheld the legal outcome, allowing the data to be retained.
Source
Source: District Court of Midden-Nederland
