CJEU C-17/22 HTB Neunte Immobilien Portfolio
UPDATED: National case-law could be relevant under Article 6(1)(c) legal obligation. And while we get some further guidance on legitimate interest assessments, the CJEU creates some confusion around 'strictly necessary' again.
Nov 25, 2024
—
5 min read
You might also like
CJEU C-446/21 Schrems (Communication of data to the general public)
members
–
5 min read
UPDATED: No big surprises, nor new big takeaways, but this ruling sparks questions around 'strictly necessary' and 'purpose'. Ruling: Facebook can't indiscriminately use personal data on or off their platform for personalised ads, without restricting the duration and type of data.
CJEU C-169/23 Masdi
members
–
3 min read
UPDATED: First interpretation of the Art. 14(5)(c) derogation! It applies to *all* data not collected from the data subject, including self-generated data. And a DPA can verify national law under Art. 14(5)(c) - but not include Art. 32 obligations under that. And beware of language differences!
CJEU C-21/23 Lindenapotheke 4 Oct 2024
members
–
5 min read
UPDATED: Competitors can take legal action against your GDPR violations if considered an illegal unfair commercial practice. And 'special category personal data' threshold is now lower—ordering pharmacy-only medicinal products online is considered sharing health data, requiring explicit consent.