Welcome to GDPRed!

… Where the labyrinthine chaos of data protection rulings has been coaxed into something that might, under favorable lighting and with one eye closed, resemble navigable terrain.

Here lurk not dragons, but something far more terrifying: the Court of Justice of the European Union — an assembly of individuals whose collective mission appears to be ensuring that legal clarity remains purely theoretical and concision is punished with 174 additional paragraphs.

But what about Case C-740/22?” you ask innocently.

Ah yes,” replies the Court with a sinister smile, adjusting its robes, “that’s on page 47, paragraph 92, which refers you to Article 4(1), which is best understood through the lens of Case C-439/19, which cannot be interpreted without first reading Articles 5, 13, and 73(c), which naturally lead back to Case C-268/21. Was that not perfectly clear?

It is at this point your average person sighs, rubs their temples, and mutters something about ‘a high level of protection for natural persons in their data’ before reaching for the extra-strength aspirin.

This website exists because I believe that finding legal judgements should not require a herd of cats on a unicycle, three wizards, and a compass blessed by bureaucratic saints. I have gathered every GDPR judgment in one place, indexed by article, topic, and date. You can trace connections between cases, follow the breadcrumb trail from one ruling to related ones, and see which articles the Court keeps muttering about in its sleep. No simplification, just the kind of organization that brings tears of joy to the eyes of librarians and mild panic to those who profit from legal confusion.

DISCLAIMER: This website is for informational purposes only, much like how the CJEU’s 9831-page rulings are “for clarity.” While I’ve done my utmost to map this legal labyrinth, I cannot guarantee that the Court hasn’t, since yesterday, invented seven new principles, referenced three non-existent articles, or decided that the entire GDPR should now be interpreted through the lens of 17th-century maritime law. Always consult official sources, preferably with adequate provisions of caffeine and sanity breaks.

-Miloš

LinkedIn

Contact


Features and roadmap

Still in? Awesome! My suggestion is to start with browsing by the case timeline or just dive straight into the judgements. You will find the links to other cases referencing it on the right side (or, if on a phone, under the final ruling).

If more practical, just pick an article and look at the list of all the cases referring to it. Alternatively, cases are grouped by topics, although that is very much a work in progress.

The site shall forever be free (as in ad-free and real-money-free), and I will update it regularly (assuming that there is sufficient interest). On my roadmap:

  • Add rulings under the Directive
  • Review cases more carefully for references to multiple articles or outdated ones
  • Make final rulings more easily accessible (top of the case?)
  • Add better sorting/filtering by topics
  • Improve search
  • Enhance the overall UI/UX

As mentioned, this is an open-source project, so if you want to contribute, drop me a line!


FAQ

Updated more regularly than the Court's understanding of technology. Which is to say: frequently, but always one step behind.

I've made an error somewhere in this maze? Impossible!¹ Please inform me of this reality breach via the contact form at milos.no, or drop me a message on LinkedIn, within 72 hours at the latest. If you feel like helping even more, this entire website is open-source -- let me know if you would like to contribute more directly!

¹Actually quite possible, probable even.

Do you have a brilliant idea? I'd love to hear it! All ideas will be considered. (BTW, yes, I have considered adding free AI summaries. I am just scared people would take them too seriously. But we'll see. Maybe.)

DISCLAIMER: Implementation subject to time constraints and the mysterious behavior of code when I press random keys while hoping for the best.

An excellent question, and one my imaginary therapist asks frequently.

This site offers the same legal authority as your neighbor's cousin who once read a book about law while waiting at the dentist. Which is to say: none whatsoever.

If you require actual legal counsel, please consult a professional who charges by the hour and has the appropriate certificates displayed at slightly crooked angles on their office wall.

However, I do have a separate professional life where I put on my serious face and provide legitimate advice to those who want it. Get in touch (you know this by now) via milos.no or on LinkedIn. Always happy to chat :)


Case law timeline

Case law timeline

February

2025
Protection of personal data • Automated decision-making • Profiling
February 27, 2025
Protection of personal data • Concept of 'controller' • Direct designation of controller by national law
February 27, 2025
Protection of personal data • Administrative fines • Concept of 'undertaking'
February 13, 2025

January

2025
Data minimisation • Lawfulness of processing • Data relating to title and gender identity
January 9, 2025
Protection of natural persons with regard to the processing of personal data • Tasks of the supervisory authority • Concepts of a 'request' and 'excessive requests'
January 9, 2025

December

2024
Processing in the context of employment • Employees' personal data • Collective agreements
December 19, 2024

November

2024
Protection of personal data • COVID-19 certificate processing • Right to complain
November 28, 2024

October

2024
Protection of personal data • Right to erasure • Non-material damage
October 4, 2024
Protection of personal data • Remedies • Unfair commercial practices
October 4, 2024
Online social networks • General terms of use • Personalised advertising
October 4, 2024
Protection of personal data • Right to compensation and liability • Unlawful processing of data
October 4, 2024
Protection of natural persons with regard to the processing of personal data • Lawfulness of processing • Necessity of processing for the purposes of the legitimate interests pursued by the controller or by a third party
October 4, 2024

September

2024
Tasks of the supervisory authority • Corrective powers • Administrative fines
September 26, 2024
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Points (b), (c) and (f) of the first subparagraph of Article 6(1)
September 12, 2024

July

2024
Protection of natural persons with regard to the processing of personal data • Scope • Exclusion
July 11, 2024
Transparency of information • Obligation of the controller to provide information • Representation of data subjects by a consumer protection association
July 11, 2024

June

2024
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Article 82
June 20, 2024
Right to compensation for damage • Concept of non-material damage • Assessment of compensation amount
June 20, 2024

April

2024
Right to compensation for non-material damage • Liability of the controller • Exemption from liability
April 11, 2024

March

2024
Powers of the supervisory authority • Right to erasure • Erasure of unlawfully processed personal data
March 14, 2024
Consent management framework • TC String as personal data • Joint controllership
March 7, 2024
Protection of personal data • Oral disclosure of criminal data • Public access to official documents
March 7, 2024

January

2024
Right to compensation for non-material damage • Assessment of validity of Article 82 • Inadmissibility of request for assessment of validity
January 25, 2024
Protection of personal data • National security • Competence of supervisory authorities
January 16, 2024
Concept of 'controller' • Obligation to publish company documents • Successive processing of personal data
January 11, 2024

December

2023
Protection of natural persons with regard to the processing of personal data • Conditions for lawful processing • Processing of special categories of data
December 21, 2023
Principles relating to processing • Accountability of the controller • Measures implemented to ensure security of processing
December 14, 2023
Protection of personal data • Regulation (EU) 2016/679 • Right to compensation and liability
December 14, 2023
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Article 5(1)(a)
December 7, 2023
Automated individual decision-making • Credit information agencies • Automated establishment of a probability value
December 7, 2023
Protection of personal data • Development of mobile IT applications • Joint control
December 5, 2023
Concept of 'controller' • Powers of supervisory authorities • Imposition of administrative fines
December 5, 2023

October

2023
Data subject's right of access • Right to obtain a first copy of medical records • Medical records and treatment liability
October 26, 2023
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Concept of 'processing' of personal data
October 5, 2023

July

2023
Abuse of a dominant position • Processing of personal data • Powers of competition authorities
July 4, 2023

June

2023
Scope of the right of access to information • Information contained in log data • Definition of 'personal data'
June 22, 2023

May

2023
Right to compensation for damage • Non-material damage • Conditions for compensation
May 4, 2023
Data subject's right of access to personal data • Provision of a copy of the data • Concept of 'copy'
May 4, 2023
Principles relating to processing • Controllership • Lawfulness of processing
May 4, 2023

March

2023
Processing of data in the employment context • Lawfulness of processing • Consent of teachers for data processing
March 30, 2023
Lawfulness of processing • Protection of judicial independence • Enforcement of civil law claims
March 2, 2023

February

2023
Protection of natural persons with regard to the processing of personal data • Data protection officer • Prohibition on dismissing data protection officer for performing his or her tasks
February 9, 2023

January

2023
Principles relating to processing of personal data • Purpose limitation • Data minimisation
January 26, 2023
Remedies • Procedural autonomy • Effectiveness of protection rules
January 12, 2023
Protection of personal data • Data subject's right of access • GDPR Article 15
January 12, 2023

December

2022
Lawfulness of processing of personal data in criminal investigations • Subsequent processing of data relating to victims • Rights of defence in civil proceedings
December 8, 2022
- Operator of an internet search engine - Research based on a person's name - De‐referencing of search results - Removal of thumbnails from image search results - Weighing-up of fundamental rights - Burden of proof for de‐referencing requests
December 8, 2022

October

2022
Processing of personal data • Protection of privacy in electronic communications • Right to erasure
October 27, 2022
Protection of personal data • Lawfulness of processing • Video recording in electoral processes
October 20, 2022
Purpose limitation • Storage limitation • Data breach
October 20, 2022

June

2022
Protection of natural persons with regard to the processing of personal data • Second sentence of Article 38(3) • Data protection officer
June 22, 2022
Processing of personal data • Passenger Name Record (PNR) data • Scope of data retention
June 21, 2022

March

2022
Competence of the supervisory authority • Processing operations of courts acting in their judicial capacity • Access to personal data by journalists
March 24, 2022

February

2022
Protection of natural persons with regard to the processing of personal data • Lawfulness of processing • Proportionality
February 24, 2022

June

2021
Protection of natural persons with regard to the processing of personal data • National legislation providing for public access to personal data relating to penalty points imposed for road traffic offences • Lawfulness
June 22, 2021
Reference for a preliminary ruling • Intellectual property • Copyright and related rights
June 17, 2021
Protection of natural persons with regard to the processing of personal data • Charter of Fundamental Rights of the European Union • Articles 7, 8 and 47
June 15, 2021

November

2020
Processing of personal data • Consent • Collection and storage of identity documents
November 11, 2020

July

2020
Protection of individuals with regard to the processing of personal data • Transfers of personal data to third countries • Adequacy of protection
July 16, 2020
Concept of 'court or tribunal' • Protection of natural persons with regard to the processing of personal data • Right of access by the data subject
July 9, 2020

October

2019
Cookies • Concept of consent of the data subject • Declaration of consent by means of a pre-ticked checkbox
October 1, 2019

September

2019
Principles relating to processing • Controllership • Lawfulness of processing
September 24, 2019

January

2019
Customs union • The Union Customs Code • Status of authorised economic operator
January 16, 2019