[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwdHInvAov77H-S6dQ6P9tVN9kVHJENBX91891ee3AQo":3},{"article":4,"iocs":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":26,"category":27,"article_tags":31},"a395447b-c138-487f-8998-0eb99c56185c","ΔΔΚ - 1181\u002F18","1181-18-14a6bc","Fixed link ← Older revision Revision as of 07:12, 16 September 2026 Line 7: Line 7: |Court_Original_Name=Διοικητικό Δικαστήριο της Κύπρου |Court_Original_Name=Διοικητικό Δικαστήριο της Κύπρου |Court_English_Name=Administrative Court of Cyprus |Court_English_Name=Administrative Court of Cyprus |Court_With_Country=ΔΔΚ (Cyprus) |Court_With_Country=Διοικητικού Δικαστηρίου (Cyprus) |Case_Number_Name=1181\u002F18 |Case_Number_Name=1181\u002F18","The Administrative Court of Cyprus annulled a DPA decision, ruling that a university could temporarily restrict an assistant professor's access to evaluation reports during an ongoing promotion procedure. The court found that the DPA failed to balance the data subject's right of access under GDPR against the university's legitimate interest in preserving confidentiality and procedural integrity.","Cyprus court allows temporary restriction of access to evaluation reports during promotion.","Help ΔΔΚ - 1181\u002F18: Difference between revisions From GDPRhub Jump to:navigation, search ← Older editVisualWikitext Revision as of 09:32, 16 April 2026 view sourceSfl (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators567 editsm ← Older edit Latest revision as of 07:12, 16 September 2026 view source Sfl (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators567 editsm Tag: Visual edit Line 7: Line 7: |Court_Original_Name=Διοικητικό Δικαστήριο της Κύπρου|Court_Original_Name=Διοικητικό Δικαστήριο της Κύπρου |Court_English_Name=Administrative Court of Cyprus|Court_English_Name=Administrative Court of Cyprus |Court_With_Country=ΔΔΚ (Cyprus)|Court_With_Country=Διοικητικού Δικαστηρίου (Cyprus) |Case_Number_Name=1181\u002F18|Case_Number_Name=1181\u002F18 Latest revision as of 07:12, 16 September 2026 ΔΔΚ - 1181\u002F18 Court: Διοικητικού Δικαστηρίου (Cyprus) Jurisdiction: Cyprus Relevant Law: Article 15 GDPR Article 12 of the Cyprus Data Protection Law Decided: 08.12.2025 Published: 08.12.2025 Parties: University of Cyprus National Case Number\u002FName: 1181\u002F18 European Case Law Identifier: Appeal from: Commissioner (Cyprus) Appeal to: Unknown Original Language(s): Greek Original Source: CYLAW (in Greek) Initial Contributor: n\u002Fa A court held that a university could temporarily restrict an assistant professor’s right to access regarding their evaluation report during an ongoing promotion procedure. According to the court, this restriction is necessary for preserving the procedural integrity of the promotion process. Contents 1 English Summary 1.1 Facts 1.2 Holding 2 Comment 3 Further Resources 4 English Machine Translation of the Decision English Summary Facts An assistant professor (the data subject) requested access to the content of evaluation reports by independent reviewers and letters of recommendation prepared during the academic promotion procedure from the University of Cyprus (the controller). The controller refused access during the ongoing promotion process, relying on their internal regulations and long-standing academic practice requiring confidentiality and anonymity of external reviewers to protect objectivity and impartiality. They indicated, however, that access could be granted after completion of the procedure, with the reviewers’ identities redacted. The data subject filed a complaint with the Commissioner, the Cypriot DPA. The DPA held that the controller had violated the right of access to personal data under Article 12 of Cypriot data protection law and issued a formal decision ordering the controller to ensure access, suggesting anonymization of reviewers’ names. The controller then appealed that decision before the Administrative Court. Holding The Administrative Court annulled the DPA’s decision. It held that the DPA had failed to properly balance the data subject’s right of access under Article 15 GDPR against the legitimate interests of the controller in preserving confidentiality and procedural integrity during an ongoing promotion process. The Court emphasized that the timing of the access request was crucial and that temporary restrictions could be justified where disclosure might affect the fairness and objectivity of a complex administrative procedure. The Court further found that the DPA had focused too narrowly on anonymization and had not adequately considered whether deferring access until the conclusion of the promotion process would constitute a proportionate limitation of the right of access. The controller’s position was not to deny access permanently, rather, it indicated that access could be provided after the final decision, with reviewers’ names redacted. Comment Share your comments here! Further Resources Share blogs or news articles here! English Machine Translation of the Decision The decision below is a machine translation of the Greek original. Please refer to the Greek original for more details. CYPRUS BAR ASSOCIATION Search - List of Administrative Court Decisions - Show References (Noteup on) - Remove Underlining ADMINISTRATIVE COURT PERSONAL Applicant __________________________________ A. Christou (Ms), for Ioannidis Dimitriou D.E.P.E., attorneys for the applicant. B. Christoforou (Ms), Attorney of the First Republic, attorney for the defendants of the application. DECISION KELEPESII, D.D.D.: With this appeal, the applicant seeks the following remedy: \"Declaration of the Court that the act and\u002For decision of the Defendants Application dated 12.6.2018 which was notified to the Applicant on 15.6.2018 (Annex \"A\") and by which it was held that the Defendants' Application refusal of the Applicant to satisfy the request of the complainant Ms. A.P. for access to the content of the evaluations of independent judges and letters of recommendation, within the deadlines given, constitutes a violation of the provisions of article 12 of the Personal Data Processing (Protection of Individuals) Law no. 138(1)\u002F2001, is invalid and\u002For devoid of any legal effect.” The essential facts surrounding the present case are as follows: On 19.6.2017, a complaint was submitted to the Commissioner for Personal Data Protection (hereinafter “the Commissioner”) by an Assistant Professor of the University of Cyprus against the University for its refusal to provide the complainant with access to the content of independent reviewer evaluations. In her letter, the complainant attached, among other things, a copy of an internal memo dated 16.2.2017 from the Director of Administration and Finance of the University, informing the complainant of the Senate's decision not to communicate to candidates, as stipulated in Regulation 9(7) of the University of Cyprus (Election and Promotion of Academic Staff) Regulations 1996 to 2015, the evaluation letters of independent reviewers and letters of recommendation submitted to the Special Committee during the evaluation process, which was received in the context of a previous corresponding complaint submitted by the complainant to the Commissioner for Administration and Protection of Human Rights. As explained in the Senate decision, which was also attached to the complaint in question, this: \"is the practice followed over time in academic reviews and developments and it is deemed necessary to ensure the anonymity of the reviewers, in order to ensure their objectivity. In particular, the Senate believes that, based on international practice, evaluation letters and letters of recommendation are more reliable and are based on the data of the candidate's work instead of on networks of relationships of specialized scientific cooperation within each community, when they are managed confidentially, they are not communicated to the candidate and do not leak to the scientific community that treats the corresponding subject.\" The University was informed of the submission of the said complaint by a letter from the Commissioner dated 10.7.2017, which noted the Commissioner's prima facie view that the University could satisfy the complainant's request, as it is obliged by article 12 of the Processing of Personal Data (Protection of Individuals) Law of 2001, Law 138(1)\u002F2001 (hereinafter \"the Law\"), which concerns the right of access, by providing a copy of the independent reviewer's evaluation and by outlining\u002Fblacking out his name and other identifying information, in a manner that preserves his anonymity. Therefore, the University's views on the above suggestion were requested by 31.7.2017. This was followed, on 21.7.2017, by a letter from the Director of Administration and Finance on behalf of the University, informing the Commissioner that the issue in question would be put for examination at the next Senate meeting scheduled for 6.9.2017. On 12.9.2017, a reminder letter was sent by the Commissioner to the applicant, requesting that the University expedite its response. By letter dated 25.9.2017, the University informed the Commissioner that the Senate ","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=%CE%94%CE%94%CE%9A_-_1181\u002F18&diff=53061&oldid=51350","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-09-16T07:12:13+00:00","2026-09-16T08:00:14.726099+00:00",7,[18,21,24],{"name":19,"type":20},"GDPR","product",{"name":22,"type":23},"University of Cyprus","vendor",{"name":25,"type":20},"Data Protection Law","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":26,"icon":28,"name":29,"slug":30},null,"Policy","policy",[32,36,41,46],{"category":33},{"id":34,"icon":28,"name":19,"slug":35},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","gdpr",{"category":37},{"id":38,"icon":28,"name":39,"slug":40},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":42},{"id":43,"icon":28,"name":44,"slug":45},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":47},{"id":26,"icon":28,"name":29,"slug":30},[]]