Case Law · CJEU EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
CJEU: Leak of personal data to journalist and press release both constitute processing
Processing: A leak (unauthorised transmission of personal data to a journalist by someone inside OLAF) and the publication of a press release each constitute processing (¶204)
Original title: NIKOLAOU V. COMMISSION
Judgment
Full text
summary
Processing: A leak (unauthorised transmission of personal data to a journalist by someone inside OLAF) and the publication of a press release each constitute processing (¶204)
¶204 excerpt
De plus, la communication de données personnelles à un journaliste par une personne qui a nécessairement eu accès à ces données au sein de l’OLAF constitue un traitement de données à caractère personnel au sens de l’article 2, sous b), du règlement n° 45/2001, lequel comprend, notamment, « la communication par transmission, diffusion ou toute autre forme de mise à disposition » de telles données.
How it connects
References
Related across sources
HDPA investigates Greek Infrastructure Ministry for SMS sent without consent or The DPA started an investigation, after receiving 83 complaints from data subjects, against the Ministry of Infrastructure and Transportation (the controller). Particularly,… 17/2026 ·Greece ·Art. 5, 14 Sep 15, 2026 Consent Right to Object Personal Data
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Apr 17, 2023 Right of Access Personal Data Right to Rectification
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Oct 13, 2021 GDPR Subject-Matter and Objectives Right to Restriction Data Portability
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB May 4, 2020 Consent Data Portability Personal Data
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Jul 7, 2021 Controllers Processors IP Address
2026 Coordinated Enforcement Action, EDPB, Coordinated Enforcement Action, implementation of the right to erasure by controllers EDPB Mar 2, 2026 Supervision Right to be Forgotten Right of Access