exceptions - DPO Hub

GDPR 2.0?

members – 7 min read

Kuner criticises 2024 Draghi report | Commission outlines digital simplification plans at LIBE meeting | Commission proposes to simplify the European Single Market, including the GDPR Articles 4, 30, 40 and 42.

Oct 29, 2025

CJEU C-33/22 Österreichische Datenschutzbehörde 16 Jan 2024

members – 2 min read

A ruling on the GDPR's material scope clarifying that DPAs can oversee parliamentary committees' personal data processing, as they're not automatically excluded or classified as national security matters under the GDPR.

Dec 29, 2024

CJEU C-446/21 Schrems (Communication of data to the general public) 4 Oct 2024

members – 5 min read

A ruling that sparks questions around 'strictly necessary' and 'purpose'. Facebook can't indiscriminately use personal data on or off their platform for personalised ads, without restricting the duration and type of data.

Dec 8, 2024

CJEU C-461/22 MK (Professional guardian) 11 Jul 2024

members – 1 min read

A former legal guardian who acted in a professional capacity is a controller and must comply with the GDPR, including the right of access.

Jul 14, 2024

CJEU C-101/01 Bodil Lindqvist 6 Nov 2003

members – 4 min read

A key (Directive 95/46/EC) ruling broadly interpreting key definitions (personal and health data, processing) and narrowly applied exceptions, but found that simply putting a website online doesn't necessarily result in transfers.

Apr 9, 2024