Skip to content
News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Political data breach in Malta: C-Planet refuses right to access and information

Full text

Political data breach in Malta: C-Planet refuses right to access and information Today, noyb filed a second complaint before the Information & Data Protection Commissioner (IDPC) against the Maltese IT company C-Planet. In January, the company received a €65 000 fine by the IDPC for illegal collection and leak of personal information including political preferences on nearly every Maltese voter. However, C-Planet still did not give the name of the person from whom they received the data, and Maltese citizens are still left in the dark about the origin of the collected data. noyb is now explicitly asking the IDPC to order C-Planet to provide information about the original source of the data. Complaint filed in 2020. In November 2020, noyb filed a complaint against C-Planet IT Solutions, the company responsible for a leaked database of voter’s data in Malta. The leaked personal information included telephone numbers, dates of birth and, voting intentions and political leanings of over 33

How it connects

C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Right to be Forgotten Personal Data
C-182/22 JU and SO v Scalable Capital GmbH In Joined Cases C-182/22 and C-189/22, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Amtsgericht München concerning the… CJEU ·Third Chamber Jun 20, 2024 Liability Data Breaches Notification Obligation
T-553/23 Philippe Latombe v European Commission In Case T-553/23, French citizen Philippe Latombe sought annulment of the European Commission's Implementing Decision (EU) 2023/1795, which found that the United States ensures an… General Court ·Tenth Chamber, Extended Composition Sep 3, 2025 Privacy Shield Automated Decision-Making International Transfer
2023 EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Apr 17, 2023 Supervision Supervisory Authorities Privacy Shield
15625/2026 Cass.Civ. - 15625/2026 Istituto nazionale della previdenza sociale (INPS, the controller) is the Italian National Institute for Social Security. In 2021, the DPA fined the controller €300,000 for its… Supreme Court May 21, 2026 Privacy by Design & Default Privacy by Design DPIA
C-300/21 UI v Österreichische Post AG C-300/21 (Österreichische Post) CJEU May 4, 2023 Liability IP Address Fines