Article 3 Right of access by data subjects

Where the Commission restricts, wholly or partly, the right of access to personal medical data by data subjects, as referred to in Article 17 of Regulation (EU) 2018/1725, it shall inform the data subject concerned, in writing, in its reply to the request for access without undue delay of the restriction applied and of the principal reasons therefor. The Commission will also inform the data subject of the possibility of lodging a complaint with the European Data Protection Supervisor or of seeking judicial remedy in the Court of Justice of the European Union.

The provision of information concerning the reasons for the restriction referred to in paragraph 1 may be deferred, omitted or denied for as long as it would undermine the purpose of the restriction.

The Commission shall record the reasons for the restriction in accordance with Article 5.

Where the right of access is wholly or partly restricted, the data subject shall exercise his or her right of access through the intermediary of the European Data Protection Supervisor, in accordance with Article 25(6), (7) and (8) of Regulation (EU) 2018/1725.