search

… Article 83 of / must be interpreted as meaning that an administrative fine may be imposed pursuant to that provision only where it is established that the controller, which is both a legal person and an undertaking, intentionally or negligently committed an infringement referred to in Article 83(4) to (6) thereof. [Signatures] * Language of the case: German. …

… JUDGMENT OF THE COURT (Grand Chamber) 5 December 2023 (*) (Reference for a preliminary ruling - Protection of personal data - (EU) / - Article 4(7) - Concept of ‘controller’ - Article 58(2) - Powers of supervisory authorities to apply corrective powers - Article 83 - Imposition of administrative fines on a legal person - Conditions - Discretion of the Member States - Requirement that the infringement be intentional or negligent) In Case C-807/21, REQUEST for a preliminary ruling …

… Meessen, acting as Agents, after hearing the Opinion of the Advocate General at the sitting on 27 April 2023, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of Article 83(4) to (6) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1, ‘the GDPR’), and therefore also with the tasks conferred on it under the latter regulation. …

… European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ 2018 L 295, p. 39). 4 According to the European Data Protection Board, however, those provisions, and the issues raised by the present appeal, overlap and intersect inseparably with those of …

… Article 61(1) of Regulation 2018/858, read in conjunction with Article 61(4) and point 6.1 of Annex X to that regulation, must be interpreted as meaning that it establishes a ‘legal obligation’, within the meaning of Article 6(1)(c) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection …

… (EU) / - Article 6(1)(c) - Processing of personal data - Legal obligation on car manufacturers to make vehicle identification numbers (VIN) available to independent operators) In Case C-319/22, REQUEST for a preliminary ruling under Article 267 TFEU from the Landgericht Köln (Regional Court, Cologne, Germany), made by decision of 4 May 2022, received at the Court on 11 May 2022, in the proceedings Gesamtverband Autoteile-Handel eV v Scania CV AB, THE COURT (Third Chamber), composed of K. …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1; ‘the GDPR’). 2 The request has been made in proceedings between Gesamtverband Autoteile-Handel eV (‘Gesamtverband’), a German trade association representing wholesalers of motor vehicle parts, and Scania CV AB …

… The Amtsgericht München (Local Court, Munich, Germany) seeks the Court’s guidance as to the interpretation of the concept of non-material damage in Article 82 of (EU) / (3) and the conditions under which compensation for such damage is available. It asks, in particular, whether the theft of that data constitutes ‘identity theft’ to which recital 75 of the GDPR refers. II. Legal framework - European Union law 2. …

… Provisional text OPINION OF ADVOCATE GENERAL COLLINS delivered on 26 October 2023(1) Joined Cases C-182/22 and C-189/22 JU (C-182/22) SO (C-189/22) v Scalable Capital GmbH (Request for a preliminary ruling from the Amtsgericht München, (Local Court, Munich, Germany)) (Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - (EU) / - Article 82(1) - Right to compensation for damage caused by data processing that infringes …

… Article 82(1) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) must be interpreted as meaning that the theft by an unknown offender of a data subject’s sensitive personal data may give rise to a right to compensation for non-material damage upon proof of an infringement …

… The first sentence of Article 15(3) of / must be interpreted as meaning that, in the context of a doctor-patient relationship, the right to obtain a copy of personal data undergoing processing means that the data subject must be given a faithful and intelligible reproduction of all those data. …

… JUDGMENT OF THE COURT (First Chamber) 26 October 2023 (*) (Reference for a preliminary ruling - Processing of personal data - (EU) / - Articles 12, 15 and 23 - Data subject’s right of access to his or her data undergoing processing - Right to obtain a first copy of those data free of charge - Processing of a patient’s data by his or her medical practitioner - Medical records - Reasons for the request for access - Use of data for the purpose of triggering the liability of the person …

… Kranenborg, acting as Agents, after hearing the Opinion of the Advocate General at the sitting on 20 April 2023, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of Article 12(5), Article 15(3) and Article 23(1)(i) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive …

… JUDGMENT OF THE COURT (Eighth Chamber) 5 October 2023 (*) (Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - (EU) / - Article 4(2) - Concept of ‘processing’ of personal data - Mobile application - Verification of the validity of ‘EU Digital COVID Certificates’ issued pursuant to Regulation (EU) 2021/953) In Case C-659/22, REQUEST for a preliminary ruling under Article 267 TFEU from the Nejvyšší správní soud (Supreme …

… Ondrůšek, acting as Agents, having decided, after hearing the Advocate General, to proceed to judgment without an Opinion, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of Article 2(1) and Article 4(2) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ( …

… On those grounds, the Court (Eighth Chamber) hereby rules: The concept of ‘processing’ personal data referred to in Article 4(2) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) must be interpreted as including the verification, using a national mobile application, …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1). 5 According to Article 39(1) of Regulation 2022/2065, providers of very large online platforms or of very large online search engines that present advertisements on their online interfaces are required to compile …

… /, which concerns information relating to the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. 79 Consequently, it must be concluded that, without prejudging the Court’s decision in the main action, that plea relied on by the applicant appears, prima facie, not to lack a serious basis and therefore calls …

… search engine the online platform or the online search engine which has a number of average monthly active recipients of the service in the European Union equal to or higher than 45 million. 4 According to Article 38 of Regulation 2022/2065, providers of very large online platforms and of very large online search engines that use recommender systems are required to provide at least one option for each of their recommender systems which is not based on profiling as defined in Article 4, point (4), of …

… not automatically render that body an ‘official authority’ within the meaning of Article 10 of /. …

… Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). (2) Article 5(1)(c) and Article 6(3) of / must be interpreted as not precluding the practice, by a national authority responsible for promoting, coordinating, and monitoring a national doping control programme, of disclosing, on its website, …

… in a publicly accessible manner, the personal data of a professional athlete in relation to a breach of an anti-doping rule. (3) Article 10 of / must be interpreted as applying to the processing of personal data relating to the possession and partial use by a professional athlete, in connection with a sporting activity, of substances listed on the World Anti-Doping Agency Prohibited List. (4) Tasking a body with reviewing a decision finding a breach of an anti-doping rule does …

… ., seeks to have set aside the order of the General Court of the European Union of 7 December 2022, WhatsApp Ireland v European Data Protection Board (T-709/21, EU:T:2022:783), by way of which the General Court dismissed its action seeking annulment of Decision 1/2021 of the European Data Protection Board of 28 July 2021, adopted pursuant to Article 5 of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the …

… ., seeks to have set aside the order of the General Court of the European Union of 7 December 2022, WhatsApp Ireland v European Data Protection Board (T-709/21, EU:T:2022:783; ‘the contested order’), by way of which the General Court dismissed as inadmissible its action seeking annulment of Decision 1/2021 of the European Data Protection Board of 28 July 2021 (‘the decision at issue’), adopted pursuant to Article 5 of (EU) / of the European Parliament and of the Council of 27 April …