[tomp]

Isn't that just straight abuse of the law? AFAIK GDPR only protects your personal information, it can't be used to request someone else's personal information (if anything, you could argue that GDPR prevents you from giving out another person's info).

[fuscy]

This isn't the police or the parliament asking for the information. It's the regulatory body that does inspections to companies to see if they respect GDPR.

So the pretext they're using is that they want to see the information to make sure that the news organisation is not selling it or mishandling it to other third parties. In the process, they'll be able to get the information and maybe it will go to the people involved in the corruption charges (which is the head of one part of the Parliament).

[riffraff]

wouldn't any other regulatory body be able to ask that data to check, for example, if they are doing _anything illegal_ with that data?

For example, can't you check for all data to verify that the business is not doing anything with forbidden individuals or countries? (think OFAC)

I don't think GDPR allows anything more than any other law.

[graeme]

Potentual for abuse of laws is one of the concerns people have about laws.

[SiempreViernes]

They aren't actually following the letter of the law, so to me it's unclear how much they actually abuse the law rather than simply pasting the GDPR logo in one corner in a sort of legal phishing attempt.

[tomp]

It's a concern people have about governments.