search

… ., seeks to have set aside the order of the General Court of the European Union of 7 December 2022, WhatsApp Ireland v European Data Protection Board (T-709/21, EU:T:2022:783), by way of which the General Court dismissed its action seeking annulment of Decision 1/2021 of the European Data Protection Board of 28 July 2021, adopted pursuant to Article 5 of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1, corrected in OJ 2018 L 127, p. 2) also shows that the concept of an ‘undertaking’ in the field of anti-trust law is not automatically transferable to other regulatory situations in cases where that is not expressly …

… 25 See the judgment previously cited in footnote 5 of 27 April 2017, Akzo Nobel and Others v Commission (C-516/15 P, EU:C:2017:314, paragraphs 46 to 48 and the case-law cited). 26 See the fourth subparagraph of Article 63(1) read in conjunction with Article 19(2) of Directive 2014/24/EU of the European Parliament and of the Council of 26 February 2014 on public procurement and repealing Directive 2004/18/EC (OJ 2014 L 94, p. 65). 27 Article 83(4) to (6), read in conjunction with recital 150 of …

… / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“the GDPR”) repealed Directive 95/46/EC of 24 October 1995. It entered into force on 25 May 2018. …

… Section 24(2) exempts the processing of personal data carried out for journalistic purposes from the application of a number of Articles of (EU) / of the European Parliament and of the Council of 27 April 2016 (see paragraph 69 below). Article 17 of the Regulation is not among the provisions concerned. The Code of Criminal Procedure 52. …

… Point (a) of the first subparagraph of Article 6(1) and Article 9(2)(a) of / must be interpreted as meaning that the fact that the operator of an online social network holds a dominant position on the market for online social networks does not, as such, preclude the users of such a network from being able validly to consent, within the meaning of Article 4(11) of that regulation, to the processing of their personal data by that operator. …

… to (f) of the first subparagraph of Article 6(1) of / - Whether the processing is lawful - Article 9(1) and (2) - Processing of special categories of personal data - Article 4(11) - Concept of ‘consent’) In Case C-252/21, REQUEST for a preliminary ruling under Article 267 TFEU from the Oberlandesgericht Düsseldorf (Higher Regional Court, Düsseldorf, Germany), made by decision of 24 March 2021, received at the Court on 22 April 2021, in the proceedings Meta Platforms Inc., formerly …

… Meessen, acting as Agents, after hearing the Opinion of the Advocate General at the sitting on 20 September 2022, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of Article 4(3) TEU and of Article 6(1), Article 9(1) and (2), Article 51(1) and Article 56(1) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement …

… See Article 16 of Regulation 2019/1157. 4 (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1) (‘the GDPR’). 5 Judgment of 17 October 2013, Schwarz (C-291/12, EU:C:2013:670) (‘the judgment in Schwarz’). 6 Council Regulation (EC) No 2252/2004 of 13 December …

… On 25 May 2018 (EU) / of the European Parliament and of the European Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation – hereinafter “the GDPR”) entered into force. …

… Article 15(1) of / must be interpreted as meaning that information relating to consultation operations carried out on a data subject’s personal data and concerning the dates and purposes of those operations constitutes information which that person has the right to obtain from the controller under that provision. …

… JUDGMENT OF THE COURT (First Chamber) 22 June 2023 (*) (Reference for a preliminary ruling - Processing of personal data - (EU) / - Articles 4 and 15 - Scope of the right of access to information referred to in Article 15 - Information contained in log data - Article 4 - Definition of ‘personal data’ - Definition of ‘recipients’ - Temporal application) In Case C-579/21, REQUEST for a preliminary ruling under Article 267 TFEU from the Itä-Suomen hallinto-oikeus (Administrative Court …

… Article 15(1) of / must be interpreted as meaning that the fact that the controller is engaged in the business of banking and acts within the framework of a regulated activity and that the data subject whose personal data has been processed in his or her capacity as a customer of the controller was also an employee of that controller has, in principle, no effect on the scope of the right of access conferred on that data subject by that provision. …

… The relevant parts of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as in force at the material time, which was later repealed by (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General …

… I also note that the joint and several liability mechanism is not alien to EU law on data processing since, in particular, Article 82(4) of / introduces such liability where more than one controller is involved in the same processing. (32) 52. …

… In addition, the definitions of ‘personal data’ and ‘processing’ match those set out in Article 4(1) and (2) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1, and corrigendum OJ 2018 L 127, p. 2), which, however, under Article 2(2)(d) thereof, does …

… First, the remedies available to the data subject against the supervisory authority and the controller under / and Directive 2016/680 are similar. …

… Instead, it follows from the wording of Articles 52, 53 and 54 of Directive 2016/680 referred to above (32) that those provisions offer different remedies to persons claiming that that regulation has been infringed, it being understood that each of those remedies must be capable of being exercised ‘without prejudice’ to the others. (33) It must be recalled that with regard to the relationship of the remedies provided for under (EU) /, (34) the Court has ruled in the judgment in …

… /, the judgment of 12 January 2023, Nemzeti Adatvédelmi és Információszabadság Hatóság (C-132/21, EU:C:2023:2, paragraph 42). 37 Judgment of 21 June 2022, Ligue des droits humains (C-817/19, EU:C:2022:491, paragraph 86 and the case-law cited). 38 See point 54 of the present Opinion and the case-law cited. 39 Judgment of 26 January 2023, Ministerstvo na vatreshnite raboti (Recording of biometric and genetic data by the police) (C-205/21, EU:C:2023:49, paragraph 89 and the case-law cited). …