Drawing on the requirements imposed in respect of privacy and data protection by the General Data Protection Regulation, Liechtenstein and Bavaria have published some useful guidance on several key elements of the relevant regulation.

In particular, Liechtenstein has provided guidance on the intricate role of data controllers, having particular regard to recent developments by the European Court of Justice, whilst Bavaria has provided some clarity surrounding the process for assessing whether a data subject access request is of an “unfounded” or “excessive” character as well as the implications arising out of a finding of such character.