Status Not cited by any decision here yet
Judgment
Full text
In accordance with the Court’s settled case-law, any processing of personal data must observe the principles governing the processing of such data and the rights of the ‘data subject’, within the meaning of Article 4(1) of the GDPR, which are set out, respectively, in Chapters II and III of that regulation. In particular, it must comply with the principles relating to the processing of those data provided for in Article 5 of that regulation and satisfy the conditions for lawfulness of processing listed in Article 6 thereof (see, to that effect, judgments of 19 December 2024, K GmbH (Processing of employees’ personal data), C‑65/23, EU:C:2024:1051, paragraph 46, and of 3 April 2025, Ministerstvo zdravotnictví (Data concerning the representative of a legal person), C‑710/23, EU:C:2025:231, paragraph 33).