scope - DPO Hub

CJEU C-33/22 Österreichische Datenschutzbehörde 16 Jan 2024

members – 2 min read

A ruling on the GDPR's material scope clarifying that DPAs can oversee parliamentary committees' personal data processing; such committees aren’t automatically excluded or classified as national security matters under the GDPR.

Dec 29, 2024

CJEU C-115/22 NADA and Others

members – 2 min read

Controversial AG Opinion concluding that sports are outside GDPR's scope, with odd logic on Art. 9, stays unclear as the CJEU finds the referring body lacks the needed independence to be a 'court or tribunal', making their preliminary ruling request inadmissible. 🙄

May 10, 2024

CJEU C-101/01 Bodil Lindqvist

members – 4 min read

A key (Directive 95/46/EC) ruling broadly interpreting key definitions (personal and health data, processing) and narrowly applied exceptions, but found that simply putting a website online doesn't necessarily result in transfers.

Apr 9, 2024

CJEU C-740/22 Endemol Shine Finland

members – 3 min read

The CJEU held that orally disclosing personal data is 'processing' and potentially subject to the GDPR + sharing criminal data orally (or in writing) is not allowed to fulfill a public access request.

Mar 26, 2024