Case Law Timeline
January
2025
Mousse v Commission nationale de l'informatique et des libertés (CNIL), SNCF Connect
Data minimisation • Lawfulness of processing • Data relating to title and gender identity
January 9, 2025
Österreichische Datenschutzbehörde v F R
Protection of natural persons with regard to the processing of personal data • Tasks of the supervisory authority • Concepts of a 'request' and 'excessive requests'
January 9, 2025
December
2024
MK v K GmbH
Processing in the context of employment • Employees' personal data • Collective agreements
December 19, 2024
November
2024
Nemzeti Adatvédelmi és Információszabadság Hatóság v UC
Protection of personal data • COVID-19 certificate processing • Right to complain
November 28, 2024
October
2024
Agentsia po vpisvaniyata v OL
Protection of personal data • Right to erasure • Non-material damage
October 4, 2024
ND v DR
Protection of personal data • Remedies • Unfair commercial practices
October 4, 2024
Maximilian Schrems v Meta Platforms Ireland Ltd
Online social networks • General terms of use • Personalised advertising
October 4, 2024
A v Patērētāju tiesību aizsardzības centrs
Protection of personal data • Right to compensation and liability • Unlawful processing of data
October 4, 2024
Koninklijke Nederlandse Lawn Tennisbond v Autoriteit Persoonsgegevens
Protection of natural persons with regard to the processing of personal data • Lawfulness of processing • Necessity of processing for the purposes of the legitimate interests pursued by the controller or by a third party
October 4, 2024
September
2024
TR v Land Hessen
Tasks of the supervisory authority • Corrective powers • Administrative fines
September 26, 2024
HTB Neunte Immobilien Portfolio geschlossene Investment UG & Co. KG v Müller Rechtsanwaltsgesellschaft mbH, Ökorenta Neue Energien Ökostabil IV geschlossene Investment GmbH & Co. KG v WealthCap Photovoltaik 1 GmbH Co. KG and Others
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Points (b), (c) and (f) of the first subparagraph of Article 6(1)
September 12, 2024
July
2024
MK v WB
Protection of natural persons with regard to the processing of personal data • Scope • Exclusion
July 11, 2024
Meta Platforms Ireland Ltd, formerly Facebook Ireland Ltd v Bundesverband der Verbraucherzentralen und Verbraucherverbände -- Verbraucherzentrale Bundesverband eV
Transparency of information • Obligation of the controller to provide information • Representation of data subjects by a consumer protection association
July 11, 2024
June
2024
JU, SO v Scalable Capital GmbH
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Article 82
June 20, 2024
AT, BT v PS GbR, VG, MB, DH, WB, GS
Right to compensation for damage • Concept of non-material damage • Assessment of compensation amount
June 20, 2024
April
2024
GP v juris GmbH
Right to compensation for non-material damage • Liability of the controller • Exemption from liability
April 11, 2024
March
2024
Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság
Powers of the supervisory authority • Right to erasure • Erasure of unlawfully processed personal data
March 14, 2024
IAB Europe v Gegevensbeschermingsautoriteit
Consent management framework • TC String as personal data • Joint controllership
March 7, 2024
Endemol Shine Finland Oy
Protection of personal data • Oral disclosure of criminal data • Public access to official documents
March 7, 2024
January
2024
BL v MediaMarktSaturn Hagen-Iserlohn GmbH, formerly known as Saturn Electro-Handelsgesellschaft mbH Hagen
Right to compensation for non-material damage • Assessment of validity of Article 82 • Inadmissibility of request for assessment of validity
January 25, 2024
Österreichische Datenschutzbehörde v WK
Protection of personal data • National security • Competence of supervisory authorities
January 16, 2024
État belge v Autorité de protection des données, LM
Concept of 'controller' • Obligation to publish company documents • Successive processing of personal data
January 11, 2024
December
2023
ZQ v Medizinischer Dienst der Krankenversicherung Nordrhein
Protection of natural persons with regard to the processing of personal data • Conditions for lawful processing • Processing of special categories of data
December 21, 2023
VB v Natsionalna agentsia za prihodite
Principles relating to processing • Accountability of the controller • Measures implemented to ensure security of processing
December 14, 2023
VX, AT v Gemeinde Ummendorf
Protection of personal data • Regulation (EU) 2016/679 • Right to compensation and liability
December 14, 2023
UF, AB v Land Hessen
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Article 5(1)(a)
December 7, 2023
OQ v Land Hessen
Automated individual decision-making • Credit information agencies • Automated establishment of a probability value
December 7, 2023
Nacionalinis visuomenės sveikatos centras prie Sveikatos apsaugos ministerijos v Valstybinė duomenų apsaugos inspekcija
Protection of personal data • Development of mobile IT applications • Joint control
December 5, 2023
Deutsche Wohnen SE v Staatsanwaltschaft Berlin
Concept of 'controller' • Powers of supervisory authorities • Imposition of administrative fines
December 5, 2023
October
2023
FT v DW
Data subject's right of access • Right to obtain a first copy of medical records • Medical records and treatment liability
October 26, 2023
RK v Ministerstvo zdravotnictví
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Concept of 'processing' of personal data
October 5, 2023
July
2023
Meta Platforms Inc., formerly Facebook Inc., Meta Platforms Ireland Ltd, formerly Facebook Ireland Ltd, and Facebook Deutschland GmbH v Bundeskartellamt
Abuse of a dominant position • Processing of personal data • Powers of competition authorities
July 4, 2023
June
2023
J.M. v Pankki S
Scope of the right of access to information • Information contained in log data • Definition of 'personal data'
June 22, 2023
May
2023
UI v Österreichische Post AG
Right to compensation for damage • Non-material damage • Conditions for compensation
May 4, 2023
F.F. v Österreichische Datenschutzbehörde
Data subject's right of access to personal data • Provision of a copy of the data • Concept of 'copy'
May 4, 2023
UZ v Bundesrepublik Deutschland
Principles relating to processing • Controllership • Lawfulness of processing
May 4, 2023
March
2023
Hauptpersonalrat der Lehrerinnen und Lehrer beim Hessischen Kultusministerium v Minister des Hessischen Kultusministeriums
Processing of data in the employment context • Lawfulness of processing • Consent of teachers for data processing
March 30, 2023
Norra Stockholm Bygg AB v Per Nycander AB
Lawfulness of processing • Protection of judicial independence • Enforcement of civil law claims
March 2, 2023
February
2023
X-FAB Dresden GmbH & Co. KG v FC
Protection of natural persons with regard to the processing of personal data • Data protection officer • Prohibition on dismissing data protection officer for performing his or her tasks
February 9, 2023
January
2023
V.S. v Ministerstvo na vatreshnite raboti, Glavna direktsia za borba s organiziranata prestapnost
Principles relating to processing of personal data • Purpose limitation • Data minimisation
January 26, 2023
BE v Nemzeti Adatvédelmi és Információszabadság Hatóság
Remedies • Procedural autonomy • Effectiveness of protection rules
January 12, 2023
RW v Österreichische Post AG
Protection of personal data • Data subject's right of access • GDPR Article 15
January 12, 2023
December
2022
VS v Inspektor v Inspektorata kam Visshia sadeben savet
Lawfulness of processing of personal data in criminal investigations • Subsequent processing of data relating to victims • Rights of defence in civil proceedings
December 8, 2022
TU and RE v Google LLC
- Operator of an internet search engine
- Research based on a person's name
- De‐referencing of search results
- Removal of thumbnails from image search results
- Weighing-up of fundamental rights
- Burden of proof for de‐referencing requests
December 8, 2022
October
2022
Proximus NV v Gegevensbeschermingsautoriteit
Processing of personal data • Protection of privacy in electronic communications • Right to erasure
October 27, 2022
Komisia za zashtita na lichnite danni, Tsentralna izbiratelna komisia v Koalitsia 'Demokratichna Bulgaria -- Obedinenie'
Protection of personal data • Lawfulness of processing • Video recording in electoral processes
October 20, 2022
Digi Távközlési és Szolgáltató Kft. v Nemzeti Adatvédelmi és Információszabadság Hatóság
Purpose limitation • Storage limitation • Data breach
October 20, 2022
June
2022
Leistritz AG v LH
Protection of natural persons with regard to the processing of personal data • Second sentence of Article 38(3) • Data protection officer
June 22, 2022
Ligue des droits humains v Conseil des ministres
Processing of personal data • Passenger Name Record (PNR) data • Scope of data retention
June 21, 2022
April
2022
Meta Platforms Ireland Limited, formerly Facebook Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände -- Verbraucherzentrale Bundesverband e.V.
Representation of data subjects • Unfair commercial practices • Consumer protection
April 28, 2022
March
2022
X, Z v Autoriteit Persoonsgegevens
Competence of the supervisory authority • Processing operations of courts acting in their judicial capacity • Access to personal data by journalists
March 24, 2022
February
2022
'SS' SIA v Valsts ieņēmumu dienests
Protection of natural persons with regard to the processing of personal data • Lawfulness of processing • Proportionality
February 24, 2022
June
2021
B v Latvijas Republikas Saeima
Protection of natural persons with regard to the processing of personal data • National legislation providing for public access to personal data relating to penalty points imposed for road traffic offences • Lawfulness
June 22, 2021
Mircom International Content Management & Consulting (M.I.C.M.) Limited v Telenet BVBA
Reference for a preliminary ruling • Intellectual property • Copyright and related rights
June 17, 2021
Facebook Ireland Ltd, Facebook Inc., Facebook Belgium BVBA v Gegevensbeschermingsautoriteit
Protection of natural persons with regard to the processing of personal data • Charter of Fundamental Rights of the European Union • Articles 7, 8 and 47
June 15, 2021
November
2020
Orange România SA v Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Processing of personal data • Consent • Collection and storage of identity documents
November 11, 2020
July
2020
Data Protection Commissioner v Facebook Ireland Ltd, Maximillian Schrems
Protection of individuals with regard to the processing of personal data • Transfers of personal data to third countries • Adequacy of protection
July 16, 2020
VQ v LandHessen
Concept of 'court or tribunal' • Protection of natural persons with regard to the processing of personal data • Right of access by the data subject
July 9, 2020
October
2019
Bundesverband der Verbraucherzentralen und Verbraucherverbände --- Verbraucherzentrale Bundesverband eV v Planet49 GmbH
Cookies • Concept of consent of the data subject • Declaration of consent by means of a pre-ticked checkbox
October 1, 2019
January
2019
Bundesverband der Verbraucherzentralen und Verbraucherverbände
Case law timeline
January
2025
December
2024
Processing in the context of employment • Employees' personal data • Collective agreements
December 19, 2024
November
2024
Protection of personal data • COVID-19 certificate processing • Right to complain
November 28, 2024
October
2024
Protection of personal data • Right to erasure • Non-material damage
October 4, 2024
Protection of personal data • Remedies • Unfair commercial practices
October 4, 2024
Online social networks • General terms of use • Personalised advertising
October 4, 2024
Protection of personal data • Right to compensation and liability • Unlawful processing of data
October 4, 2024
Protection of natural persons with regard to the processing of personal data • Lawfulness of processing • Necessity of processing for the purposes of the legitimate interests pursued by the controller or by a third party
October 4, 2024
September
2024
Tasks of the supervisory authority • Corrective powers • Administrative fines
September 26, 2024
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Points (b), (c) and (f) of the first subparagraph of Article 6(1)
September 12, 2024
July
2024
Protection of natural persons with regard to the processing of personal data • Scope • Exclusion
July 11, 2024
Transparency of information • Obligation of the controller to provide information • Representation of data subjects by a consumer protection association
July 11, 2024
June
2024
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Article 82
June 20, 2024
Right to compensation for damage • Concept of non-material damage • Assessment of compensation amount
June 20, 2024
April
2024
Right to compensation for non-material damage • Liability of the controller • Exemption from liability
April 11, 2024
March
2024
Powers of the supervisory authority • Right to erasure • Erasure of unlawfully processed personal data
March 14, 2024
Consent management framework • TC String as personal data • Joint controllership
March 7, 2024
Protection of personal data • Oral disclosure of criminal data • Public access to official documents
March 7, 2024
January
2024
Right to compensation for non-material damage • Assessment of validity of Article 82 • Inadmissibility of request for assessment of validity
January 25, 2024
Protection of personal data • National security • Competence of supervisory authorities
January 16, 2024
Concept of 'controller' • Obligation to publish company documents • Successive processing of personal data
January 11, 2024
December
2023
Protection of natural persons with regard to the processing of personal data • Conditions for lawful processing • Processing of special categories of data
December 21, 2023
Principles relating to processing • Accountability of the controller • Measures implemented to ensure security of processing
December 14, 2023
Protection of personal data • Regulation (EU) 2016/679 • Right to compensation and liability
December 14, 2023
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Article 5(1)(a)
December 7, 2023
Automated individual decision-making • Credit information agencies • Automated establishment of a probability value
December 7, 2023
Protection of personal data • Development of mobile IT applications • Joint control
December 5, 2023
Concept of 'controller' • Powers of supervisory authorities • Imposition of administrative fines
December 5, 2023
October
2023
Data subject's right of access • Right to obtain a first copy of medical records • Medical records and treatment liability
October 26, 2023
Protection of natural persons with regard to the processing of personal data • Regulation (EU) 2016/679 • Concept of 'processing' of personal data
October 5, 2023
July
2023
Abuse of a dominant position • Processing of personal data • Powers of competition authorities
July 4, 2023
June
2023
Scope of the right of access to information • Information contained in log data • Definition of 'personal data'
June 22, 2023
May
2023
Right to compensation for damage • Non-material damage • Conditions for compensation
May 4, 2023
Data subject's right of access to personal data • Provision of a copy of the data • Concept of 'copy'
May 4, 2023
Principles relating to processing • Controllership • Lawfulness of processing
May 4, 2023
March
2023
Processing of data in the employment context • Lawfulness of processing • Consent of teachers for data processing
March 30, 2023
Lawfulness of processing • Protection of judicial independence • Enforcement of civil law claims
March 2, 2023
February
2023
Protection of natural persons with regard to the processing of personal data • Data protection officer • Prohibition on dismissing data protection officer for performing his or her tasks
February 9, 2023
January
2023
Principles relating to processing of personal data • Purpose limitation • Data minimisation
January 26, 2023
Remedies • Procedural autonomy • Effectiveness of protection rules
January 12, 2023
Protection of personal data • Data subject's right of access • GDPR Article 15
January 12, 2023
December
2022
Lawfulness of processing of personal data in criminal investigations • Subsequent processing of data relating to victims • Rights of defence in civil proceedings
December 8, 2022
- Operator of an internet search engine
- Research based on a person's name
- De‐referencing of search results
- Removal of thumbnails from image search results
- Weighing-up of fundamental rights
- Burden of proof for de‐referencing requests
December 8, 2022
October
2022
Processing of personal data • Protection of privacy in electronic communications • Right to erasure
October 27, 2022
Protection of personal data • Lawfulness of processing • Video recording in electoral processes
October 20, 2022
Purpose limitation • Storage limitation • Data breach
October 20, 2022
June
2022
Protection of natural persons with regard to the processing of personal data • Second sentence of Article 38(3) • Data protection officer
June 22, 2022
Processing of personal data • Passenger Name Record (PNR) data • Scope of data retention
June 21, 2022
April
2022
Representation of data subjects • Unfair commercial practices • Consumer protection
April 28, 2022
March
2022
Competence of the supervisory authority • Processing operations of courts acting in their judicial capacity • Access to personal data by journalists
March 24, 2022
February
2022
Protection of natural persons with regard to the processing of personal data • Lawfulness of processing • Proportionality
February 24, 2022
June
2021
Protection of natural persons with regard to the processing of personal data • National legislation providing for public access to personal data relating to penalty points imposed for road traffic offences • Lawfulness
June 22, 2021
Reference for a preliminary ruling • Intellectual property • Copyright and related rights
June 17, 2021
Protection of natural persons with regard to the processing of personal data • Charter of Fundamental Rights of the European Union • Articles 7, 8 and 47
June 15, 2021
November
2020
Processing of personal data • Consent • Collection and storage of identity documents
November 11, 2020
July
2020
Protection of individuals with regard to the processing of personal data • Transfers of personal data to third countries • Adequacy of protection
July 16, 2020
Concept of 'court or tribunal' • Protection of natural persons with regard to the processing of personal data • Right of access by the data subject
July 9, 2020
October
2019
Cookies • Concept of consent of the data subject • Declaration of consent by means of a pre-ticked checkbox
October 1, 2019
January
2019
Customs union • The Union Customs Code • Status of authorised economic operator
January 16, 2019