A Dutch appeals court has thrown out a penalty imposed by the data regulator against a company which required users to submit ID documents in order to access their data. Filed under Netherlands IT & Data Protection Litigation Topics Data protection and privacy Enforcement Subject access request Organisations Dutch Data Protecton Authority European Court of Justice Industries Technology