search

… Interpreting Article 2(2)(a) of (EU) / (3) providing for an exception to the applicability of that regulation in terms identical to those of Article 2(3)(a) of Directive 2016/680, the Court held that that first provision, read in the light of recital 16 of that regulation, must be regarded as being designed solely to exclude from the scope of that regulation the processing of personal data carried out by State authorities in the course of an activity which is intended to safeguard …

… Article 5(2) of / must be interpreted as meaning that the official journal in question is required to comply with the data controller’s responsibilities under that provision for the operations it has carried out. …

… However, as to the absence of the designation of the controller with respect to the withdrawal or erasure of data since the data at issue remain publicly available, it is for the national court to designate the entity that must comply with the obligations arising from /. …

… OPINION OF ADVOCATE GENERAL MEDINA delivered on 8 June 2023(1) Case C-231/22 État belge v Autorité de protection des données, joined party: LM (Request for a preliminary ruling from the cour d’appel de Bruxelles (Court of Appeal, Brussels, Belgium)) (Reference for a preliminary ruling - (EU) / - Article 4(7) and (8) - Processing of personal data - Concepts of ‘controller’ and ‘processor’ - Determining the purpose and the means of the data processing - Obligation of designation by …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1). 116 Regulation 2018/1725 is the ‘equivalent’ of / as regards the protection of personal data by the EU institutions, bodies, offices and agencies (see recital 5 of Regulation 2018/1725). 117 …

… considered in relation to its function in society and weighed on that basis against other fundamental rights, in an approach which gives each of the rights involved its proper place in the EU legal order, in the light of the facts of the case, in accordance with the principle of proportionality. 115 The need to strike such a balance between the right to the protection of personal data and the other fundamental rights recognised in that legal order is emphasised by the EU legislature in recital 4 of …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1) (‘the GDPR’). …

… (EU) / - Article 6(1), first subparagraph, points (c) and (e), and Article 6(3), second subparagraph - Article 9(1) - Sensitive data - National legislation requiring judges to make a declaration as to whether they belong to associations, foundations or political parties, and to the positions held within those associations, foundations or political parties, and providing for the placing online of the data contained in those declarations) In Case C-204/21, ACTION for failure to fulfil obligations …

… of compliance with certain requirements relating to the existence of an independent and impartial tribunal previously established by the law classified as a ‘disciplinary offence’ - Exclusive jurisdiction to examine questions relating to the lack of independence of a court or judge conferred on the Extraordinary Review and Public Affairs Chamber of the Sąd Najwyższy (Supreme Court) - Articles 7 and 8 of the Charter of Fundamental Rights - Rights to privacy and the protection of personal data - …

… /; the degree of fault on the part of the controller or processor does not have a bearing on establishing the liability of either of them or quantifying the amount of non-material damage to be compensated on the basis of Article 82(1) of /; the involvement of the data subject in the event giving rise to the compensation obligation may trigger, depending on the circumstances, the exemption from liability of the controller or processor provided for in Article 82(3) of …

… This reference for a preliminary ruling concerns the interpretation of (EU) / (2) as regards (a) the processing of personal data concerning health, and (b) compensation for damage suffered as a result of an (alleged) breach of the GDPR itself. 2. …

… / and Directive (EU) 2016/680, held on 10 October 2016, p. 2, and Minutes of the meeting of the Commission expert group on (EU) / and Directive (EU) 2016/680, held on 20 February 2018, p. 2. 46 A view in favour of cumulation or complementarity can be found, for instance, in Petri, T., ‘Art. 9’, in Simitis/Hornung/Spiecker gen. …

… / and Article 10(1) of Regulation 2018/1725. 164 Article 9(1) and (2)(g) of / and Article 10(1) and (2)(g) of Regulation 2018/1725 provide, in identical terms, as follows: ‘1. …

… / provides that the processing of personal data is lawful where at least one of the six conditions referred to in that paragraph is met. …

… It must be stated that that email does not contain data covered by Article 9(1) of / and Article 10(1) of Regulation 2018/1725. 182 The same applies to the second document, which consists of a performance level self-assessment by a member of the applicant’s staff. …

… / and Article 10(1) of Regulation 2018/1725. 211 Article 9(1) and (2)(g) of / and Article 10(1) and (2)(g) of Regulation 2018/1725 provide, in identical terms, as follows: ‘1. …

… / provides that the processing of personal data is lawful where at least one of the six conditions referred to in that paragraph is met. …

… The applicant has not established that that email contains data covered by Article 9(1) of / and Article 10(1) of Regulation 2018/1725. 231 The same applies to the second document, which consists of a performance level self-assessment by a member of the applicant’s staff. …

… /, do not come within the scope of the exception provided for in Article 2(2)(a) of that regulation. (3) If a Member State has established only a single supervisory authority in accordance with Article 51(1) of /, the competence of that authority in respect of the complaints referred to in Article 77(1) of that regulation arises directly from that provision, read in conjunction with Article 55(1) of that regulation. 1 Original language: French. 2 Regulation of the European …

… Do the activities of a committee of inquiry of the Parliament of a Member State fall within the scope of (EU) /, (2) particularly when the inquiry concerns matters relating to national security? If so, can the provisions of the GDPR relating to the right to lodge a complaint with a national supervisory authority be applied directly, despite a constitutional principle that precludes external interference in the Parliament’s activities? …

… Given all of the foregoing considerations, I propose that the Court should answer the questions referred by the Verwaltungsgerichtshof (Supreme Administrative Court, Austria) as follows: (1) The activities of a committee of inquiry set up by a Parliament of a Member State in the exercise of its right to scrutinise the executive fall within the scope of EU law within the meaning of the first sentence of Article 16(2) TFEU; accordingly (EU) / of the European Parliament and of the …

… (EU) / of the European Parliament and of the Council [of the European Union] of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, Official Journal L 119, 04.05.2016 41. The relevant parts of the General Data Protection Regulation read as follows: Article 2 Material scope “ ... 2. …

… The third sentence of Article 15(3) of / must be interpreted as meaning that the concept of ‘information’ to which it refers relates exclusively to the personal data of which the controller must provide a copy pursuant to the first sentence of that paragraph. [Signatures] * Language of the case: German. …

… JUDGMENT OF THE COURT (First Chamber) 4 May 2023 (*) (Reference for a preliminary ruling - Protection of personal data - (EU) / - Data subject’s right of access to his or her data undergoing processing - Article 15(3) - Provision of a copy of the data - Concept of ‘copy’ - Concept of ‘information’) In Case C-487/21, REQUEST for a preliminary ruling under Article 267 TFEU from the Bundesverwaltungsgericht (Federal Administrative Court, Austria), made by decision of 9 August 2021, …

… Kranenborg, acting as Agents, after hearing the Opinion of the Advocate General at the sitting on 15 December 2022, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of Article 15 of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation …