🚨 CJEU confirms TC String as personal data and IAB Europe as joint controller
DPO Hub writeup coming soon!
Mar 7, 2024
—
1 min read
You might also like
CJEU C-654/23 Inteligo Media 13 Nov 2025
members
–
7 min read
If a user creates a free account and gets access to articles, newsletters and the option to pay for further content, this falls under Art. 13(1) and (2) ePD as 'sale of a service' and 'direct marketing', and you don't need a legal basis under Art. 6 GDPR, in line with Art. 95 GDPR.
CJEU C-413/23 P EDPS v SRB (Concept of personal data) 4 Sep 2025
members
–
5 min read
Pseudonymised data isn’t always personal in every case to everyone – but measures must be effective. Comments are personal by nature – no need to assess content, purpose or effects. Whether a person can be identified must be assessed from the controller’s perspective, when collecting the data.
CJEU T-553/23 Latombe v Commission 3 Sep 2025
members
–
4 min read
🔥 Latombe to appeal! New CJEU case number: C-703/25 P | "The General Court dismisses the action for annulment" and the EU-US DPF remains valid.