search

… ., seeks to have set aside the order of the General Court of the European Union of 7 December 2022, WhatsApp Ireland v European Data Protection Board (T-709/21, EU:T:2022:783; ‘the contested order’), by way of which the General Court dismissed as inadmissible its action seeking annulment of Decision 1/2021 of the European Data Protection Board of 28 July 2021 (‘the decision at issue’), adopted pursuant to Article 5 of (EU) / of the European Parliament and of the Council of 27 April …

… ., seeks to have set aside the order of the General Court of the European Union of 7 December 2022, WhatsApp Ireland v European Data Protection Board (T-709/21, EU:T:2022:783), by way of which the General Court dismissed its action seeking annulment of Decision 1/2021 of the European Data Protection Board of 28 July 2021, adopted pursuant to Article 5 of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the …

… (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1, corrected in OJ 2018 L 127, p. 2) also shows that the concept of an ‘undertaking’ in the field of anti-trust law is not automatically transferable to other regulatory situations in cases where that is not expressly …

… 25 See the judgment previously cited in footnote 5 of 27 April 2017, Akzo Nobel and Others v Commission (C-516/15 P, EU:C:2017:314, paragraphs 46 to 48 and the case-law cited). 26 See the fourth subparagraph of Article 63(1) read in conjunction with Article 19(2) of Directive 2014/24/EU of the European Parliament and of the Council of 26 February 2014 on public procurement and repealing Directive 2004/18/EC (OJ 2014 L 94, p. 65). 27 Article 83(4) to (6), read in conjunction with recital 150 of …

… Point (a) of the first subparagraph of Article 6(1) and Article 9(2)(a) of / must be interpreted as meaning that the fact that the operator of an online social network holds a dominant position on the market for online social networks does not, as such, preclude the users of such a network from being able validly to consent, within the meaning of Article 4(11) of that regulation, to the processing of their personal data by that operator. …

… to (f) of the first subparagraph of Article 6(1) of / - Whether the processing is lawful - Article 9(1) and (2) - Processing of special categories of personal data - Article 4(11) - Concept of ‘consent’) In Case C-252/21, REQUEST for a preliminary ruling under Article 267 TFEU from the Oberlandesgericht Düsseldorf (Higher Regional Court, Düsseldorf, Germany), made by decision of 24 March 2021, received at the Court on 22 April 2021, in the proceedings Meta Platforms Inc., formerly …

… Meessen, acting as Agents, after hearing the Opinion of the Advocate General at the sitting on 20 September 2022, gives the following Judgment 1 This request for a preliminary ruling concerns the interpretation of Article 4(3) TEU and of Article 6(1), Article 9(1) and (2), Article 51(1) and Article 56(1) of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement …

… / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“the GDPR”) repealed Directive 95/46/EC of 24 October 1995. It entered into force on 25 May 2018. …

… Section 24(2) exempts the processing of personal data carried out for journalistic purposes from the application of a number of Articles of (EU) / of the European Parliament and of the Council of 27 April 2016 (see paragraph 69 below). Article 17 of the Regulation is not among the provisions concerned. The Code of Criminal Procedure 52. …

… See Article 16 of Regulation 2019/1157. 4 (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1) (‘the GDPR’). 5 Judgment of 17 October 2013, Schwarz (C-291/12, EU:C:2013:670) (‘the judgment in Schwarz’). 6 Council Regulation (EC) No 2252/2004 of 13 December …

… On 25 May 2018 (EU) / of the European Parliament and of the European Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation – hereinafter “the GDPR”) entered into force. …

… Article 15(1) of / must be interpreted as meaning that information relating to consultation operations carried out on a data subject’s personal data and concerning the dates and purposes of those operations constitutes information which that person has the right to obtain from the controller under that provision. …

… JUDGMENT OF THE COURT (First Chamber) 22 June 2023 (*) (Reference for a preliminary ruling - Processing of personal data - (EU) / - Articles 4 and 15 - Scope of the right of access to information referred to in Article 15 - Information contained in log data - Article 4 - Definition of ‘personal data’ - Definition of ‘recipients’ - Temporal application) In Case C-579/21, REQUEST for a preliminary ruling under Article 267 TFEU from the Itä-Suomen hallinto-oikeus (Administrative Court …

… Article 15(1) of / must be interpreted as meaning that the fact that the controller is engaged in the business of banking and acts within the framework of a regulated activity and that the data subject whose personal data has been processed in his or her capacity as a customer of the controller was also an employee of that controller has, in principle, no effect on the scope of the right of access conferred on that data subject by that provision. …

… The relevant parts of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as in force at the material time, which was later repealed by (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General …

… Interpreting Article 2(2)(a) of (EU) / (3) providing for an exception to the applicability of that regulation in terms identical to those of Article 2(3)(a) of Directive 2016/680, the Court held that that first provision, read in the light of recital 16 of that regulation, must be regarded as being designed solely to exclude from the scope of that regulation the processing of personal data carried out by State authorities in the course of an activity which is intended to safeguard …