search

… JUDGMENT OF THE COURT (First Chamber) 12 January 2023 (*) (Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - (EU) / - Article 15(1)(c) - Data subject’s right of access to his or her data - Information about the recipients or categories of recipient to whom the personal data have been or will be disclosed - Restrictions) In Case C-154/21, REQUEST for a preliminary ruling under Article 267 TFEU from the Oberster Gerichtshof …

… Kranenborg, acting as Agents, after hearing the Opinion of the Advocate General at the sitting on 9 June 2022, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of Article 15(1)(c) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation …

… , entails, where those data have been or will be disclosed to recipients, an obligation on the part of the controller to provide the data subject with the actual identity of those recipients, unless it is impossible to identify those recipients or the controller demonstrates that the data subject’s requests for access are manifestly unfounded or excessive within the meaning of Article 12(5) of /, in which cases the controller may indicate to the data subject only the categories …

… (EU) /) Table of contents I. …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (3) (‘the GDPR’). 2. …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation); - order the Republic of Poland to pay four fifths of the costs, including four fifths of the costs relating to the proceedings for interim relief; - order the Kingdom of Belgium, the Kingdom of Denmark, the Kingdom of the Netherlands …

… OPINION OF ADVOCATE GENERAL PITRUZZELLA delivered on 15 December 2022(1) Case C-487/21 F.F. interested parties: Österreichische Datenschutzbehörde, CRIF GmbH (Request for a preliminary ruling lodged by the Bundesverwaltungsgericht (Federal Administrative Court, Austria)) (Reference for a preliminary ruling - Protection of personal data - (EU) / - Article 15(3) - Right of access by the data subject to personal data undergoing processing - Right to receive a copy of personal data …

… What is the content and what is the scope of the right conferred on the data subject who obtains access to his or her personal data that are undergoing processing to receive a copy of those data, as provided for by Article 15(3) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection …

… The concept of “information” in the third sentence of Article 15(3) of / must be interpreted as referring exclusively to the “copy of personal data undergoing processing” referred to in the first sentence of that paragraph. 1 Original language: Italian. 2 OJ 2016 L 119, p. 1. 3 Judgment of 20 December 2017, Nowak (C-434/16, EU:C:2017:994). 4 See the references to Austrian and German doctrine and case-law in paragraphs 1 and 2 of the order for reference, respectively. 5 The Austrian …

… That court has made a reference to the Court of Justice for a preliminary ruling on the interpretation of (EU) /. (2) In answering the questions referred, the Court of Justice will have to rule on the right of the data subject to access certain information relating to the processing of his or her personal data. I. Legislative framework A. European Union law. The GDPR 3. …

… OPINION OF ADVOCATE GENERAL CAMPOS SÁNCHEZ-BORDONA delivered on 15 December 2022 (1) Case C-579/21 J.M. intervener: Apulaistietosuojavaltuutettu, Pankki S (Request for a preliminary ruling from the Itä-Suomen hallinto-oikeus (Administrative Court of Eastern Finland, Finland)) (Reference for a preliminary ruling - Processing of personal data - (EU) / - User log data - Right of access - Definition of personal data - Definition of recipient - Personnel in the department responsible …

… In the light of the foregoing, I propose that the Court of Justice reply as follows to the Itä-Suomen hallinto-oikeus (Administrative Court of Eastern Finland, Finland): Article 15(1) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), read with Article 4(1) of that regulation …

… JUDGMENT OF THE COURT (Grand Chamber) 8 December 2022 (*) (Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - Directive 95/46/EC - Article 12(b) - Point (a) of the first paragraph of Article 14 - (EU) / - Article 17(3)(a) - Operator of an internet search engine - Research carried out on the basis of a person’s name - Displaying a link to articles containing allegedly inaccurate information in the list of search results …

… Nardi, acting as Agents, after hearing the Opinion of the Advocate General at the sitting on 7 April 2022, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of Article 17(3)(a) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation …

… Article 17(3)(a) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), must be interpreted as meaning that within the context of the weighing-up exercise which is to be undertaken between the rights referred to in Articles 7 and 8 of the Charter of Fundamental Rights of …

… JUDGMENT OF THE COURT (Fifth Chamber) 8 December 2022 (*) (Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - (EU) / - Articles 2, 4 and 6 - Applicability of / - Concept of ‘legitimate interest’ - Concept of ‘task carried out in the public interest or in the exercise of official authority’ - Directive (EU) 2016/680 - Articles 1, 3, 4, 6 and 9 - Lawfulness of the processing of personal data collected …

… Article 6(1) of / must be interpreted as meaning that where an action for damages against the State is based on alleged misconduct on the part of the public prosecutor’s office in the performance of its tasks in criminal matters, such processing of personal data may be regarded as lawful if it is necessary for the performance of a task carried out in the public interest, within the meaning of point (e) of the first subparagraph of Article 6(1) of that regulation, for the purpose …

… Article 3(8) and Article 9(1) and (2) of Directive 2016/680 and Article 2(1) and (2) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) must be interpreted as meaning that that regulation is applicable to the processing of personal data by the public prosecutor’s office …

… The institutional legal framework 21 Chapter VI of / is entitled ‘Independent supervisory authorities’. …

… However, under Article 68(1) of /, the EDPB was established as a body of the Union and has legal personality. …

… In the present case, that recital does not underpin any provision of /, as noted in paragraphs 32 and 35 above. …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1; ‘the GDPR’). 2 The requests have been made in two sets of proceedings, the first between WM and Luxembourg Business Registers (‘LBR’) (Case C-37/20) and the second between Sovim SA and LBR (Case C-601/20), concerning …

… money laundering or terrorist financing, amending Regulation (EU) No 648/2012 of the European Parliament and of the Council, and repealing Directive 2005/60/EC of the European Parliament and of the Council and Commission Directive 2006/70/EC (OJ 2015 L 141, p. 73), and also the interpretation, first, of Article 30(9) of Directive 2015/849, as amended by Directive 2018/843 (‘Directive 2015/849 as amended’), and, secondly, of Article 5(1)(a) to (c) and (f), Article 25(2) and Articles 44 to 50 of …

… It may thus only be stated that the prior collection of IP addresses by rightholder organisations is not covered by the provisions of Directive 2002/58 and, as the Commission points out, could therefore be analysed in the light of the provisions of (EU) /. (11) Accordingly, such an analysis seems to me to go beyond the scope of the questions referred to the Court for a preliminary ruling, particularly since the referring court does not provide any clarification in respect of the …

… Article 17 of / must be interpreted as meaning that the request by a subscriber to have his or her personal data withdrawn from publicly available telephone directories and directory enquiry services constitutes making use of the ‘right to erasure’ within the meaning of that article. 3. …

… JUDGMENT OF THE COURT (Fourth Chamber) 27 October 2022 (*) (Reference for a preliminary ruling - Processing of personal data and protection of privacy in the electronic communications sector - Directive 2002/58/EC - Article 12 - Public telephone directories and directory enquiry services - Subscriber’s consent - Obligations of the provider of directories and of directory enquiry services - (EU) / - Article 17 - Right to erasure (‘right to be forgotten’) - Article 5(2) - Article …

… Article 17(2) of / must be interpreted as not precluding a national supervisory authority from ordering a provider of publicly available telephone directories and directory enquiry services - which has been requested by the subscriber of a telephone service operator to cease disclosing personal data relating to him or her - to take ‘reasonable steps’, within the meaning of that provision, to inform search engine providers of that request for erasure of the data. …