An individual raised a query with the DPC about gaining access to information held by a garage detailing the history of the vehicle the individual now owned, including details of damages assessed, recommended repairs, and an engineer’s report conducted towards the end of a particular year. The individual submitted an access request under Article 15 of the GDPR to the garage for all data related to the vehicle. The garage refused the request. As they were dissatisfied with the response received from the garage, they contacted the DPC to raise their concerns. 

In response, the DPC reviewed the request and provided relevant information, advising that under GDPR, “personal data” is defined in Article 4(1) as any information relating to an identified or identifiable natural person. While a vehicle’s registration plate could be considered personal data, the condition of the vehicle itself prior to a person’s ownership did not relate to the individual as a natural person. Consequently, the DPC considered that data protection law did not apply in this case, and the concerns raised fell outside its remit.