Skip to content
Case Law · CJEU EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

MINISTER VOOR IMMIGRATIE V. M, 17.7.2014 (“Minister v. M”)

Personal data: The data relating to the applicant for a residence permit included in the minute (applicant’s name, DOB, nationality, gender, ethnicity, religion and language) constitute personal data.

Judgment

Personal data
AG Opinion
Summary

The legal analysis in the minute may contain personal data but it does not in itself constitute such data. The legal analysis is not information relating to the applicant, but at most, in so far as not limited to a purely abstract interpretation of the law, is information about the assessment and a

Full text

summary
Personal data: The data relating to the applicant for a residence permit included in the minute (applicant’s name, DOB, nationality, gender, ethnicity, religion and language) constitute personal data. The legal analysis in the minute may contain personal data but it does not in itself constitute such data. The legal analysis is not information relating to the applicant, but at most, in so far as not limited to a purely abstract interpretation of the law, is information about the assessment and application by the competent authority of that law to the applicant’s situation. (¶¶ 34,38-41)
¶34 excerpt
Although all interested parties who adopted a view on this point consider that the data relating to the applicant for a residence permit included in the minute correspond to the concept of ‘personal data’ and propose, consequently, that a positive reply be given to the first question in Case C‑141/12, opinions differ in relation to the legal analysis in that administrative document, which is the subject of the second question in that case and the fifth question in Case C‑372/12.
¶38 excerpt
There is no doubt that the data relating to the applicant for a residence permit and contained in a minute, such as the applicant’s name, date of birth, nationality, gender, ethnicity, religion and language, are information relating to that natural person, who is identified in that minute in particular by his name, and must consequently be considered to be ‘personal data’ (see, to that effect, inter alia the judgment in Huber, C‑524/06, EU:C:2008:724, paragraphs 31 and 43).
¶39 excerpt
As regards, on the other hand, the legal analysis in a minute, it must be stated that, although it may contain personal data, it does not in itself constitute such data within the meaning of Article 2(a) of Directive 95/46.
¶40 excerpt
As the Advocate General noted in essence in point 59 of her Opinion, and as the Netherlands, Czech and French Governments noted, such a legal analysis is not information relating to the applicant for a residence permit, but at most, in so far as it is not limited to a purely abstract interpretation of the law, is information about the assessment and application by the competent authority of that law to the applicant’s situation, that situation being established inter alia by means of the personal data relating to him which that authority has available to it.
¶41 excerpt
That interpretation of the concept of ‘personal data’ for the purposes of Directive 95/46 not only follows from the wording of Article 2(a) but is also borne out by the objective and general scheme of that directive.

GDPR Articles Cited (1)

How it connects

HDPA · 12/2026 The complainant, a foreign national, submitted a complaint to the Hellenic DPA through his authorized attorney, seeking his deletion from the Hellenic the National Registry of… 12/2026 ·Greece ·Art. 23 May 13, 2026 Right of Access Criminal Data Personal Data
€140 AEPD fines DIGI Telecom for issuing duplicate SIM to impersonator without consent On December 28, 2022, DIGI Telecom, the controller, delivered a duplicate SIM card to an unauthorized third party without the consent of the original line holder (the data… Spain ·Art. 5, 6, 83 Sep 16, 2026 Consent Integrity and Confidentiality Principle Personal Data
Icelandic DPA: City of Reykjavik cannot request bank statements from NPA disabled service The DPA received a request from a the NPA Centre, the service manager of services for disabled people with long-term care needs, asking whether the Social Services Department of… 2025020567 ·Iceland ·Persónuvernd Sep 17, 2026 Supervisory Authorities Public Authority Personal Data
Deliberação 2019/494 In its Opinion 20/2018 concerning the draft of Law 58/2019 which ensures the implementation of the GDPR in the portuguese national legal framework, the DPA drew the attention of… Deliberação 2019/494 ·Portugal ·CNPD (PT) Sep 3, 2019 Controllers Processors Legitimate Interest