Case Law · CJEU EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
CJEU: collecting, republishing and transferring already-published personal data is
SATAKUNNAN & SATAMEDIA
Original title: TIETOSUOJAVALTUUTETTU [FINNISH DATA PROTECTION OMBUDSMAN] V. SATAKUNNAN MARKKINAPORSSI OY AND SATAMEDIA OY, 16.12.2008 (“SATAKUNNAN&SATAMEDIA”)
SATAKUNNAN & SATAMEDIA
Judgment
Full text
summary
Processing: The collection, publication, transfer on a CD-ROM and by text messaging all constitute processing. This is the case even where the operations exclusively concern material that has already been published in unaltered form in the media. (¶¶ 35–37)
¶35 excerpt
It must be held that the data to which this question relates, which comprise the surname and given name of certain natural persons whose income exceeds certain thresholds as well as the amount, to the nearest EUR 100, of their earned and unearned income, constitute personal data within the meaning of Article 2(a) of the directive, since they constitute ‘information relating to an identified or identifiable natural person’ (see also Joined Cases C‑465/00, C‑138/01 and C‑139/01 Österreichischer Rundfunk and Others [2003] ECR I-4989, paragraph 64).
¶36 excerpt
It is sufficient to hold, next, that it is clear from the wording itself of the definition set out in Article 2(b) of the directive that the activity to which the question relates involves the ‘processing of personal data’ within the meaning of that provision.
¶37 excerpt
Consequently, the answer to the first question must be that Article 3(1) of the directive is to be interpreted as meaning that an activity in which data on the earned and unearned income and the assets of natural persons are:
excerpt
– collected from documents in the public domain held by the tax authorities and processed for publication,
excerpt
– published alphabetically in printed form by income bracket and municipality in the form of comprehensive lists,
excerpt
– transferred onward on CD-ROM to be used for commercial purposes, and
excerpt
– processed for the purposes of a text-messaging service whereby mobile telephone users can, by sending a text message containing details of an individual’s name and municipality of residence to a given number, receive in reply information concerning the earned and unearned income and assets of that person,
excerpt
must be considered as the ‘processing of personal data’ within the meaning of that provision.
How it connects
Related across sources
HDPA investigates Greek Infrastructure Ministry for SMS sent without consent or The DPA started an investigation, after receiving 83 complaints from data subjects, against the Ministry of Infrastructure and Transportation (the controller). Particularly,… 17/2026 ·Greece ·Art. 5, 14 Sep 15, 2026 Consent Right to Object Personal Data
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Feb 24, 2023 Privacy by Design & Default Privacy by Design Privacy by Default
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Oct 13, 2021 GDPR Subject-Matter and Objectives Right to Restriction Data Portability
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB May 4, 2020 Consent Data Portability Personal Data
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Apr 17, 2023 Right of Access Personal Data Right to Rectification
Opinion 15/2023 Brand Compliance certification criteria ·Opinion ·EDPB Sep 19, 2023 Certification Supervision Supervisory Authorities