Proportionality, privilege and purpose
The Court had to determine how far rules of proportionality could limit a data controller's obligations to search for personal data, the extent to which legal privilege exempted documents from being included in the response to a SAR, and whether the fact that the data subject might also be seeking documents in connection with litigation allowed the data controller to refuse to comply with the SAR.