CJEU C-61/22 Landeshauptstadt Wiesbaden 21 Mar 2024
A ruling on Regulation 2019/1157 on ID card security, where the CJEU clarified that its adoption couldn’t violate Article 35 of the GDPR, as it wasn’t subject to a DPIA requirement. (They also concluded that the regulation was invalid!)
Dec 29, 2024
—
1 min read
You might also like
CJEU LED C-80/23 Ministerstvo na vatreshnite raboti (Registration of biometric and genetic data II) 28 Nov 2024
members
–
3 min read
Law Enforcement Directive: Competent authorities must prove that systematically collecting biometric and genetic data of accused persons is strictly necessary under LED Article 10; they can't leave it up to a court.💡 But the truly interesting part lies in 'strictly necessary'.
CJEU C-33/22 Österreichische Datenschutzbehörde 16 Jan 2024
members
–
2 min read
A ruling on the GDPR's material scope clarifying that DPAs can oversee parliamentary committees' personal data processing; such committees aren’t automatically excluded or classified as national security matters under the GDPR.
CJEU C-687/21 MediaMarktSaturn 25 Jan 2024
members
–
3 min read
Accidental disclosure ≠ poor measures. Compensation is purely compensatory, not punitive, and requires proof of harm caused by a violation—though the severity of it doesn't affect the amount. Fear alone isn’t enough if no misuse occurred.