search

… Point IV(10)(l) of the annex to the contested decision provides that if certain documents contain sensitive personal data, as defined by (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1; ‘the GDPR’), those documents are to be supplied in an encrypted …

… Point IV(10)(l) of the annex to the contested decision provides that if certain documents contain sensitive personal data, as defined by /, those documents are to be supplied in an encrypted format and separately, and be identified as ‘sensitive personal data’. 146 In that regard, it should be borne in mind that, under Article 9(1) of /, read in the light of recital 10 of that regulation, the concept of ‘sensitive personal data’ refers to personal data which, if …

… Thus, as long as the conditions governing the legal processing of personal data under / are fulfilled, such processing meets, in principle, the requirements of Articles 7 and 8 of the Charter (judgment of 5 June 2023, Commission v Poland (Independence and private life of judges), C-204/21, EU:C:2023:442, paragraph 332). 188 In the present case, it should be recalled that, under Article 6(1)(c) of /, the applicant is engaged in a lawful processing of personal data …

… That case-law applies in the context of the penalties under Article 83 of / (see, to that effect, judgment of 5 December 2023, Nacionalinis visuomenės sveikatos centras, C-683/21, EU:C:2023:949, paragraph 82 and the case-law cited). …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1)], and of Directive 96/71/EC of the European Parliament and of the Council [of 16 December 1996 concerning the posting of workers in the framework of the provision of services (OJ 1997 L 18, p. 1)]; (c) the provisions …

… recognition and enforcement of judgments in civil and commercial matters (OJ 2012 L 351, p. 1)]; (b) the provisions regarding jurisdiction of Regulation (EU) 2017/1001 [of the European Parliament and of the Council of 14 June 2017 on the European Union trade mark (OJ 2017 L 154, p. 1)], of [Council] Regulation (EC) No 6/2002 [of 12 December 2001 on Community designs (OJ 2002 L 3, p. 1)], of [Council] Regulation (EC) No 2100/94 [of 27 July 1994 on Community plant variety rights (OJ 1994 L 227, p. 1)], of …

… They shall take the measures necessary to ensure that such lists are maintained in strict compliance with the Union rules on the protection of personal data as set out, inter alia, in (EU) / [of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1)] and Directive …

… The 2007 Act did not define “personal data”, but the definition of the term could be found in Article 4(1) of (EU) / on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“General Data Protection Regulation” – “the GDPR”) (see paragraphs 132-133 below). …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ 2016 L 119, p. 1) (“General Data Protection Regulation” – “the GDPR”) entered into force in 2016 but applies from 25 May 2018 (Article 99(2)).[4] It applies to “natural persons”, and does not cover the processing of personal data that concern legal persons …

… First, (EU) / (6) offers different remedies to persons claiming that that regulation has been infringed. In that regard, Article 77(1) of that regulation states that it is ‘without prejudice to any other administrative or judicial remedy’ that every data subject is to have the right to lodge a complaint with a supervisory authority. …

… As regards the context and the objectives pursued by /, see paragraphs 36 to 44 of that judgment. 9 Directive of the European Parliament and of the Council of 26 February 2001 on the allocation of railway infrastructure capacity and the levying of charges for the use of railway infrastructure and safety certification (OJ 2001 L 75, p. 29). …

… In my view, the wording used - and thus the system envisaged -by Directive 2014/61 resembles that of /, and differs from that of Directive 2001/14. It is therefore possible to infer that Directive 2014/61 does not oppose a parallel system. 39. However, I also acknowledge that the second subparagraph of Article 3(5) of Directive 2014/61 may be open to different interpretations. …

… Costs (Failure of a Member State to fulfil obligations - Article 258 TFEU - National legislation introducing restrictions in relation to deviation from the self-identity corresponding to the sex assigned at birth, gender reassignment, or homosexuality, with a view to protecting children - Directives 2000/31/EC, 2006/123/EC, 2010/13/EU - (EU) / - Restrictions on sex education - Principle of non-discrimination - Values of the European Union as enshrined in Article 2 TEU - Reliance …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1) (‘the GDPR’), as well as Article 8(2) of the Charter; and (b) order Hungary to pay the costs. …

… registration of judgments handed down by the courts of the Member States of the European Union against Hungarian citizens, and the registration of biometric data in criminal and law enforcement matters) of 19 June 2009 (Magyar Közlöny 2009/83), which obliges the body having direct access to registered data to make accessible to authorised persons the registered data of persons who have committed offences abusing the sexual freedom or sexual morality of children, Hungary has infringed Article 10 of …

… such data, and repealing Directive 95/46/EC (General Data Protection Regulation), must be interpreted as meaning that a supervisory authority within the meaning of Article 4(21) of /, when acting in the context of a complaint procedure based on Article 77 of that regulation, also has the status of a ‘controller’ within the meaning of that regulation and is therefore required to ensure the data subject’s right of access provided for in Article 15 of /. (2) Article …

… Provisional text OPINION OF ADVOCATE GENERAL NORKUS delivered on 16 April 2026(1) Case C-205/25 Joachim Lindenberg v Bayerisches Landesamt für Datenschutzaufsicht (Request for a preliminary ruling from the Bayerisches Verwaltungsgericht Ansbach (Bavarian Administrative Court, Ansbach, Germany)) (Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - (EU) / - Article 15 - Data subject’s request for access to his or her …

… This request for a preliminary ruling from the Bayerisches Verwaltungsgericht Ansbach (Bavarian Administrative Court, Ansbach, Germany) under Article 267 TFEU concerns the interpretation of Article 4(7) and (21) and Articles 15, 23 and 77 of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection …

… The Court concluded that Article 82(1) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1), must be interpreted as meaning that the making of an apology may constitute sufficient compensation for non-material damage on the basis of that provision, …

… Article 82(1) of / must be interpreted as conferring on the data subject a right to compensation for the damage resulting from an infringement of the right of access provided for in Article 15(1) of that regulation. 3. …

… Provisional text JUDGMENT OF THE COURT (Fourth Chamber) 19 March 2026 (*) (Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - (EU) / - Article 12(5) - Article 15(1) - Data subject’s right of access to the personal data concerning him or her - Controller’s right to refuse to act on the request for access - Excessive character of the request - Abuse of rights - First request for access - Right to compensation and liability …

… Kranenborg, acting as Agents, after hearing the Opinion of the Advocate General at the sitting on 18 September 2025, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of point 2 of Article 4, Article 12(5) and Article 82(1) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive …