Content type · 407 cases · 42 courts
Case Law
Court decisions and jurisprudence from EU and national courts
By topic Personal Data341 Processing282 Controllers193 Consent164 Identification150 Supervision149 Public Authority147 Public Sector145 Law Enforcement132 Supervisory Authorities127 IP Address125 Data Controller120 Transparency108 Monitoring108 Legitimate Interest105
Court of Justice of the European Union 145
C-647/25 Order of the Court (Sixth Chamber) of 20 March 2026.#OW v VQ.#Request for a preliminary ruling from the Sofiyski rayonen sad.#Case C-647/25. Mar 20, 2026 C-97/23 Judgment of the Court (Grand Chamber) of 10 February 2026.#WhatsApp Ireland Ltd v European Data Protection Board.#Appeal – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 63 – Consistency mechanism – Article 65 – Dispute resolution by the European Data Protection Board – Binding decision – Action for annulment – First paragraph of Article 263 TFEU – Act open to challenge – Fourth paragraph of Article 263 TFEU – Condition that the WhatsApp Ireland Ltd appealed to the Court of Justice (Grand Chamber) seeking to set aside a General Court order that dismissed as inadmissible its action for annulment… Feb 10, 2026 C-291/24 Judgment of the Court (Fourth Chamber) of 29 January 2026.#Steiermärkische Bank und Sparkassen AG and Others v Österreichische Finanzmarktaufsichtsbehörde (FMA).#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Prevention of the use of the financial system for the purposes of money laundering or terrorist financing – Directive (EU) 2015/849 – Penalties – Article 58 – Liability of legal persons – Article 59 – Attribution to a legal person of Jan 29, 2026 C-422/24 Judgment of the Court (First Chamber) of 18 December 2025.#Integritetsskyddsmyndigheten v AB Storstockholms Lokaltrafik.#Request for a preliminary ruling from the Högsta förvaltningsdomstolen.#Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Articles 13 and 14 – Scope – Personal data collected by means of body cameras worn by ticket inspectors on public transport – Legal basis for the obligation on the data controller to provide information to the dat Dec 18, 2025 C-502/25 Order of the Court (Sixth Chamber) of 18 December 2025.#„YETTEL BULGARIA“ EAD v FB.#Request for a preliminary ruling from the Sofiyski rayonen sad.#Case C-502/25. Dec 18, 2025 C-492/23 Judgment of the Court (Grand Chamber) of 2 December 2025.#X v Russmedia Digital SRL and Inform Media Press SRL.#Request for a preliminary ruling from the Curtea de Apel Cluj.#Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Article 4(7) – Concept of ‘controller’ – Responsibility of the operator of an online marketplace for the publication of personal data contained in advertisements placed on its online marketplace by user advertisers – Article 5(2) – In Case C-492/23, the Court of Justice of the European Union (Grand Chamber) addressed a preliminary reference from the Curtea de Apel Cluj concerning whether an online… Dec 2, 2025 C-654/23 Judgment of the Court (First Chamber) of 13 November 2025.#Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).#Request for a preliminary ruling from the Curtea de Apel Bucureşti.#Reference for a preliminary ruling – Processing of personal data and the protection of privacy in the electronic communications sector – Directive 2002/58/EC – Article 13(1) and (2) – Unsolicited communications – Concept of communication ‘for the purposes of di The Court of Justice of the European Union ruled on a preliminary reference from the Romanian Curtea de Apel Bucureşti in proceedings between Inteligo Media SA and the… Nov 13, 2025 C-413/23 Judgment of the Court (First Chamber) of 4 September 2025.#European Data Protection Supervisor v Single Resolution Board.#Appeal – Protection of natural persons with regard to the processing of personal data – Procedure for granting compensation to shareholders and creditors of a banking institution following the resolution of that institution – Decision of the European Data Protection Supervisor finding that the Single Resolution Board failed to fulfil its obligations relating to the processing The European Data Protection Supervisor (EDPS) appealed a General Court judgment that annulled its decision finding the Single Resolution Board (SRB) had failed to… Sep 4, 2025
All 145 Court of Justice of the European Union cases → CJEU 145
C-424/24 Opinions of the Advocate General in joined cases C-424/24, C-425/24, C-425/24 Dec 18, 2025 JH v Policejní prezidium HvJ EU 20 november 2025, C-57/23, ECLI:EU:C:2025:905, (JH v Policejní prezidium). Nov 20, 2025 HvJ EU 9 januari 2025, C‑394/23 (Mousse). HvJ EU 9 januari 2025, C‑394/23 (Mousse). Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf… Jan 9, 2025 C-340/21 VB v Natsionalna agentsia za prihodite C-340/21 (VB v Natsionalna agentsia) Dec 14, 2023 C-807/21 Deutsche Wohnen SE v Staatsanwaltschaft Berlin C-807/21 (Deutsche Wohnen) Dec 5, 2023 C-487/21 Österreichische Datenschutzbehörde v CRIF C-487/21 (Österreichische Datenschutzbehörde) Oct 26, 2023 C-601/21 Meta Platforms and Others v Bundeskartellamt C-601/21 (Meta Platforms (Bundeskartellamt)) Jul 4, 2023 C-300/21 UI v Österreichische Post AG C-300/21 (Österreichische Post) May 4, 2023
All 145 CJEU cases → General Court 36
GC - T‑375/22 - Izuzquiza and Others v Parliament Facts — Three individuals requested access from the European Parliament to documents detailing the amounts paid to Mr. Ioannis Lagos, a Greek Member of the European… Jul 16, 2026 T-367/23 Judgment of the General Court (Seventh Chamber, Extended Composition) of 19 November 2025.#Amazon EU Sàrl, venant aux droits de Amazon Services Europe Sàrl v European Commission.#Digital services – Regulation (EU) 2022/2065 – Designation as a very large online platform – Plea of illegality – Admissibility – Article 33(1) and (4) of Regulation 2022/2065 – Right to respect for private and family life – Freedom to conduct a business – Right to property – Equal treatment – Freedom of expression – Da Amazon EU Sàrl challenged the European Commission's decision designating Amazon Store as a very large online platform under Article 33(4) of the Digital Services Act… Nov 19, 2025 T-55/24 Judgment of the General Court (First Chamber, Extended Composition) of 10 September 2025.#Meta Platforms Ireland Ltd v European Commission.#Digital services – Regulation (EU) 2022/2065 – Commission decision determining the amount of the supervisory fee for 2023 – Article 43(3) to (5) of Regulation 2022/2065 – Article 4(2) of Delegated Regulation (EU) 2023/1127 – Method for calculating the number of average monthly active recipients – Temporal adjustment of the effects of an annulment.#Case T-55/ Meta Platforms Ireland Ltd challenged a European Commission decision setting the 2023 DSA supervisory fee for Facebook and Instagram, arguing the Commission unlawfully… Sep 10, 2025 T-58/24 Judgment of the General Court (First Chamber, Extended Composition) of 10 September 2025.#Tiktok Technology Ltd v European Commission.#Digital services – Regulation (EU) 2022/2065 – Commission decision determining the amount of the supervisory fee for 2023 – Article 43(3) to (5) of Regulation 2022/2065 – Article 4(2) of Delegated Regulation (EU) 2023/1127 – Method for calculating the number of average monthly active recipients – Temporal adjustment of the effects of an annulment.#Case T-58/24. In Case T-58/24, TikTok Technology Ltd challenged European Commission Implementing Decision C(2023) 8173, which determined TikTok's 2023 supervisory fee under the… Sep 10, 2025 T-348/23 Judgment of the General Court (Seventh Chamber, Extended Composition) of 3 September 2025.#Zalando SE v European Commission.#Digital services – Regulation (EU) 2022/2065 – Designation of a very large online platform – Plea of illegality – Article 33(1) and (4) of Regulation 2022/2065 – Legal certainty – Equal treatment – Proportionality – Obligation to state reasons.#Case T-348/23. In Case T-348/23, Zalando SE challenged the European Commission's April 2023 decision designating it as a very large online platform (VLOP) under the Digital Services… Sep 3, 2025 T-553/23 Judgment of the General Court (Tenth Chamber, Extended Composition) of 3 September 2025.#Philippe Latombe v European Commission.#Transfer of personal data to the United States – Commission Implementing Decision on the adequate level of protection of personal data ensured by the United States – Right to an effective remedy – Right to private and family life – Decisions based solely on the automated processing of personal data – Security of the processing of personal data.#Case T-553/23. In Case T-553/23, French citizen Philippe Latombe sought annulment of the European Commission's Implementing Decision (EU) 2023/1795, which found that the United States… Sep 3, 2025 T-183/23 Judgment of the General Court (Tenth Chamber, Extended Composition) of 16 July 2025.#Lisa Ballmann v European Data Protection Board.#Protection of personal data – Complaint against the controller of personal data of users of an online social network in the European Union – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision of the European Data Protection Board – Complainant’s request for access to the file prepared for the purposes of the binding decision – Refusal to grant access – In Case T-183/23, Lisa Ballmann sought annulment of the European Data Protection Board's decision refusing her request for access to the file prepared for Binding… Jul 16, 2025 T-319/24 Order of the General Court (Tenth Chamber) of 29 April 2025.#Meta Platforms Ireland Ltd v European Data Protection Board.#Action for annulment – Protection of personal data – Opinion of the European Data Protection Board on valid consent in the context of ‘consent or pay’ models implemented by large online platforms – Article 64(2) of Regulation (EU) 2016/679 – Act not open to challenge – Inadmissibility – Liability – Damage – Causal link – Action manifestly lacking any foundation in law.#Case T In Case T-319/24, Meta Platforms Ireland Ltd sought annulment of EDPB Opinion 8/2024 on valid consent in the context of "consent or pay" models implemented by large… Apr 29, 2025
All 36 General Court cases → GDPRhub 31
C-78/18 AG - C-78/18 - Commission v Hungary (Transparency of associations) In Commission v. Hungary (C-78/18), the European Commission challenged Hungary's 2017 transparency law requiring civil society organizations receiving foreign donations… Jul 17, 2026 C-673/17 CJEU - C-673/17 - Planet49 Facts — A German company called Planet49 organized an online lottery hosted on their webpage. In order to participate in the lottery the participant had to enter a name… Jul 16, 2026 C-350/21 CJEU - C-350/21 - Spetsializirana prokuratura (Retention of traffic and location data) Facts — In the context of criminal proceedings in Bulgaria, the prosecutor requested the Spetsializiran nakazatelen sad (Bulgarian Criminal Court) to give him access to… Jul 16, 2026 CJEU - C‑474/24 - NADA Austria and Others Facts — Several data subjects were subject to suspension proceedings by the Austrian Anti-Doping Legal Commission (ÖADR). Under Austrian law, the National Anti-Doping… Jul 15, 2026 C-526/24 CJEU - C-526/24 - Brillen Rottler Facts — On 16 March 2023, the data subject (a private individual living in Vienna) subscribed to the ‘newsletter’ on the website of the controller (a family run optician… Jul 13, 2026 CJEU - C‑199/24 - Legal Newsdesk Sweden AB Facts — The legal context: Article 85 GDPR and Swedish law — Under Swedish law the Swedish Agency for the Media can issue publications certificates which confers… Jul 9, 2026 C-61/19 CJEU - C-61/19 - Orange Romania EU LAW CLEANUP Facts. Facts Orange România SA is a provider of mobile telecommunications services on the Romanian market. On 28 March 2018, the Autoritatea Naţională de… Jul 9, 2026 CJEU - C‑371/24 - Comdribus Facts — In 2020, law enforcement officers arrested several people from a climate protest. One of the individuals detained (the data subject) provided their identity, but… Mar 19, 2026
All 31 GDPRhub cases → Federal Administrative Court 5
BVwG - W254 2321912-1 Facts — The data subject, an Austrian citizen residing in Vienna, was enrolled in a distance-learning programme at a German university (the controller). When the data… Apr 14, 2026 BVwG - W291 2298748-1 Facts — A data subject wished to be addressed in a gender-neutral way and claimed they were misgendered by two companies (the controllers) in profile settings, tickets,… Oct 31, 2025 BVwG - W 108 2284491-1 Facts — The data subject visited a website operated by a media company (the controller). Upon opening the website a cookie banner showed up. This cookie banner was… Jul 31, 2024 BVwG - W256 2227693-1 Facts — On 05.09.2019, the Austrian DPA (DSB) notified the controller of a customer loyalty program that they were initiating an ex officio investigation. The controller… Sep 28, 2023 BVwG - W292 2270002-1 Facts — On 4 October 2020, the controller sent a non-anonymised court judgement of the Regional Criminal Court (Landesgericht für Strafsachen) as a PDF file to a… Jul 27, 2023
Supreme Administrative Court 4
CE - N. 501417 Facts — Pour un RGPD Respecté, a French NGO that advocates for GDPR compliance, and three individuals requested the CNIL, the DPA, to partially repeal its 2020… Jun 19, 2026 CE - N. 433539 Facts — Several digital rights organisations asked the Prime Minister to repeal Decree No. 2010-236 of 5 March 2010. The decree regulated an automated personal data… Apr 30, 2026 CE - 473833 Facts — The DPA imposed an €8 million administrative fine on Apple (the controller) in 2022 (CNIL - SAN-2022-025). The DPA found that Apple used identifiers stored on… Oct 10, 2025 CE - 451423 Facts — The French DPA had received a complaint on 28 May 2018 regarding the lawfulness of processing by Amazon Europe Core ('Provider' or 'The company'). The French DPA… Jun 27, 2022
CE 3
CE - 449209 Facts — On 7 December 2020, the French DPA (CNIL) imposed two fines totaling € 100 million on Google LLC and Google Ireland Ltd for violating Article 82 of the French… Jan 28, 2022 CE - 439360 Facts — In February 2020 the French minister of the interior enacted the Decree No. 2020-151 of 20 February 2020 authorising the automated processing of personal data… Apr 13, 2021 CE - 449212 Facts — On December, 7 2020, the French DPA imposed a financial penalty of 60 Million euros fine against Google LLC and a 40 million euros against Google Ireland Limited… Mar 4, 2021
German Supreme Court 2
BGH - V ZB 90/25 Facts — A prospective bidder in a compulsory auction wanted to find out who owned the property being sold and filed a request to inspect certain files with a court (the… May 21, 2026 BGH - VI ZR 375/2 Facts — A debt collection agency (the controller) sent reminders to a customer (the data subject) for delayed installment payments related to a terminated electricity… May 12, 2026
Supreme Court of the Netherlands 2
Hoge Raad - 24/02161 Facts — The data subject applied for a credit card in 2008 and was granted it. In July 2020, the bank (controller) requested that the data subject identify themselves… Feb 21, 2025 PHR - 22/01253 Facts — A patient (the data subject) was treated in a hospital. Because she believed that an error had been made, she held the hospital liable. The hospital involved its… Aug 26, 2022
Norges Høyesterett 2
Norges Høyesterett - 2021-2403-A Facts — In 2012, a company "Legelisten.no AS" launched a website where people could submit anonymous reviews of healthcare personnel. From the same year, the Norwegian… Dec 7, 2021 Norges Høyesterett - 2019-1226-A Facts — The person was sent to prison for tax evasion in the years 2001 to 2006. The district court has assumed that A withheld share gains together about NOK 4.7… Jun 26, 2019
EWCA 1
High Court of Justice of the Basque Country 1
First-Tier Tribunal 1
Local Court Arnsberg 1
District Court Rotterdam 1
Higher Regional Court Cologne 1
District Court Den Haag 1
Supreme Court 1
Administrative Court Munich 1
Regional Court in Warsaw 1
Municipal Civil Court in Zagreb 1
Gereral Court 1
Higher Regional Court Vienna 1
Administrative Court in Rijeka 1
German Federal Administrative Court 1
Superior Administrative Court Saarlouis 1
Council of State 1
Svea Court of Appeal 1
Tribunal of Bologna 1
LG Köln 1
LAG Schleswig-Holstein 1
Rb. Midden-Nederland 1
EWHC (UK) 1
Supreme Administrative Court of Finland 1
Rb. Noord-Holland 1
LG Rostock 1
Hof van Justitie EU 1
BGH 1
LG Frankfurt 1
GHARL 1
Hof van Beroep Brussel 1
PVN 1