The European Court of Justice (CJEU) delivered a ruling leading to major discussions, mandating controllers to inform data subjects of recipients' names upon exercising their privacy right of access under GDPR unless specific exceptions apply.
16