4 new CJEU rulings
paid
–
1 min read
Two rulings on the concept of personal data, one stating that oral data = processing, and last one pertains to the Europol regulation. DPO Hub writeups coming!
CJEU: Data breach ≠ poor measures (but you must prove it) and fear only can constitute non-material damage
paid
–
1 min read
How not to get sued by data subjects (se full write-up of case in C-340/21 post)
CJEU (SCHUFA): On credit scoring, automated decision-making and courts' review of DPA decisions
paid
–
2 min read
Two CJEU rulings on SCHUFA Holding: Credit scoring = ADM when decisive for granting credit + national courts can fully review legally binding DPA decisions.
CJEU: Fines can only be imposed where there was intent or negligence
paid
–
1 min read
...and fines MUST be calculated on the *group's* total worldwide annual turnover!