Content type Ā· 120 cases Ā· 65 courts
Case Law
Court decisions and jurisprudence from EU and national courts
By topic Personal Data400 Processing313 Controllers233 Identification163 Consent162 Supervision160 Supervisory Authorities145 Law Enforcement142 Public Authority138 Public Sector135 Monitoring127 IP Address110 Data Controller110 Legitimate Interest106 Transparency94
CJEU 145
C-57/23 JH v PolicejnĆ prezidium HvJ EU 20 november 2025, C-57/23, ECLI:EU:C:2025:905, (JH v PolicejnĆ prezidium). Nov 20, 2025
HvJ EU 9 januari 2025, Cā394/23 (Mousse). HvJ EU 9 januari 2025, Cā394/23 (Mousse). Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naarā¦ Jan 9, 2025
C-487/21 Ćsterreichische Datenschutzbehƶrde v CRIF C-487/21 (Ćsterreichische Datenschutzbehƶrde) Oct 26, 2023
C-601/21 Meta Platforms and Others v Bundeskartellamt C-601/21 (Meta Platforms (Bundeskartellamt)) Jul 4, 2023
Court of Justice of the European Union 145
C-97/23 WhatsApp Ireland Ltd v European Data Protection Board WhatsApp Ireland Ltd appealed to the Court of Justice (Grand Chamber) seeking to set aside a General Court order that dismissed as inadmissible its action for annulment of EDPBā¦ Feb 10, 2026
C-291/24 SteiermƤrkische Bank und Sparkassen AG and Others v Ćsterreichische Finanzmarktaufsichtsbehƶrde (FMA) Jan 29, 2026
C-492/23 X v Russmedia Digital SRL and Inform Media Press SRL In Case C-492/23, the Court of Justice of the European Union (Grand Chamber) addressed a preliminary reference from the Curtea de Apel Cluj concerning whether an onlineā¦ Dec 2, 2025
C-654/23 Inteligo Media SA v Autoritatea NaÅ£ionalÄ de Supraveghere a PrelucrÄrii Datelor cu Caracter Personal (ANSPDCP) The Court of Justice of the European Union ruled on a preliminary reference from the Romanian Curtea de Apel BucureÅti in proceedings between Inteligo Media SA and the Romanianā¦ Nov 13, 2025
C-413/23 European Data Protection Supervisor v Single Resolution Board The European Data Protection Supervisor (EDPS) appealed a General Court judgment that annulled its decision finding the Single Resolution Board (SRB) had failed to fulfil itsā¦ Sep 4, 2025
GDPRhub 50
BVerwG - 6 C 13.18 Since 2016, SpaceNet AG, an ISP, has been challenging a German law which provides for an obligation to store traffic and location data of all users without any reason and acrossā¦ Jul 24, 2026
Cā769/22 European Commission v Hungary CJEU - Cā769/22 - European Commission v Hungary The background In 2021 Hungary adopted "Law LXXIX of 2021 adopting stricter measures against persons convicted of paedophilia and amending certain laws for the protection ofā¦ Jul 24, 2026
Cā474/24 NADA Austria and Others CJEU - Cā474/24 - NADA Austria and Others Several data subjects were subject to suspension proceedings by the Austrian Anti-Doping Legal Commission (ĆADR). Under Austrian law, the National Anti-Doping Agency (āNADAā)ā¦ Jul 24, 2026
C-311/18 CJEU - C-311/18 - Facebook Ireland and Schrems Maximillian Schrems, an Austrian citizen, had been a Facebook user since 2008. As is the case with users residing in the European Union, some of the data belonging to Mr. Schremsā¦ Jul 17, 2026
C-78/18 Commission v Hungary (Transparency of associations) AG - C-78/18 - Commission v Hungary (Transparency of associations) In Commission v. Hungary (C-78/18), the European Commission challenged Hungary's 2017 transparency law requiring civil society organizations receiving foreign donations above aā¦ Jul 17, 2026
Cā209/23 RRC Sports CJEU - Cā209/23 - RRC Sports FĆ©dĆ©ration internationale de football association (FIFA) is a Switzerland-based non-profit that acts as the global governing body for football. A large number of football clubsā¦ Jul 16, 2026
C-673/17 Planet49 CJEU - C-673/17 - Planet49 A German company called Planet49 organized an online lottery hosted on their webpage. In order to participate in the lottery the participant had to enter a name and an address.ā¦ Jul 16, 2026
C-350/21 Spetsializirana prokuratura CJEU - C-350/21 - Spetsializirana prokuratura (Retention of traffic and location data) In the context of criminal proceedings in Bulgaria, the prosecutor requested the Spetsializiran nakazatelen sad (Bulgarian Criminal Court) to give him access to data, includingā¦ Jul 16, 2026
General Court 36
Tā375/22 Izuzquiza and Others v Parliament GC - Tā375/22 - Izuzquiza and Others v Parliament Three individuals requested access from the European Parliament to documents detailing the amounts paid to Mr. Ioannis Lagos, a Greek Member of the European Parliament (MEP), andā¦ Jul 16, 2026
T-367/23 Amazon EU SĆ rl, venant aux droits de Amazon Services Europe SĆ rl v European Commission Amazon EU SĆ rl challenged the European Commission's decision designating Amazon Store as a very large online platform under Article 33(4) of the Digital Services Act (Regulationā¦ Nov 19, 2025
T-58/24 Tiktok Technology Ltd v European Commission In Case T-58/24, TikTok Technology Ltd challenged European Commission Implementing Decision C(2023) 8173, which determined TikTok's 2023 supervisory fee under the Digital Servicesā¦ Sep 10, 2025
T-55/24 Meta Platforms Ireland Ltd v European Commission Meta Platforms Ireland Ltd challenged a European Commission decision setting the 2023 DSA supervisory fee for Facebook and Instagram, arguing the Commission unlawfully establishedā¦ Sep 10, 2025
T-348/23 Zalando SE v European Commission In Case T-348/23, Zalando SE challenged the European Commission's April 2023 decision designating it as a very large online platform (VLOP) under the Digital Services Actā¦ Sep 3, 2025
T-553/23 Philippe Latombe v European Commission In Case T-553/23, French citizen Philippe Latombe sought annulment of the European Commission's Implementing Decision (EU) 2023/1795, which found that the United States ensures anā¦ Sep 3, 2025
T-183/23 Lisa Ballmann v European Data Protection Board In Case T-183/23, Lisa Ballmann sought annulment of the European Data Protection Board's decision refusing her request for access to the file prepared for Binding Decision 3/2022,ā¦ Jul 16, 2025
T-319/24 Meta Platforms Ireland Ltd v European Data Protection Board In Case T-319/24, Meta Platforms Ireland Ltd sought annulment of EDPB Opinion 8/2024 on valid consent in the context of "consent or pay" models implemented by large onlineā¦ Apr 29, 2025
Federal Administrative Court 9
W137 2327171-1 BVwG - W137 2327171-1 The controller, an assistant professor at a private university (the appellant), was engaged in an employment dispute with her university employer before a labour and social court.ā¦ Jul 8, 2026
W254 2321912-1 BVwG - W254 2321912-1 The data subject, an Austrian citizen residing in Vienna, was enrolled in a distance-learning programme at a German university (the controller). When the data subject enrolled,ā¦ Apr 14, 2026
W291 2298748-1 BVwG - W291 2298748-1 A data subject wished to be addressed in a gender-neutral way and claimed they were misgendered by two companies (the controllers) in profile settings, tickets, and trainā¦ Oct 31, 2025
W258 2227269-1/39E BVwG - W258 2227269-1/39E š„ 3 On the 8 January 2019, the Austrian DPA (Datenschutzbehƶrde ā DSB) launched an investigation into the actions of the Austrian postal service as it also had a business license forā¦ Dec 27, 2024
W 108 2284491-1 BVwG - W 108 2284491-1 The data subject visited a website operated by a media company (the controller). Upon opening the website a cookie banner showed up. This cookie banner was designed in such a wayā¦ Jul 31, 2024
W211 2281442-1 BVwG - W211 2281442-1 The data subject and the controller both worked as nurses at the same hospital, on different wards. Over ten years before the events in question, the data subject had beenā¦ Jun 12, 2024
W252 2247042-1 BVwG - W252 2247042-1 The controller, an Public Employment Service Austria, processed the personal data of the data subject in connection with his file. On 21 February 2019, 15 March 2019 and 25ā¦ Jan 22, 2024
W256 2227693-1 BVwG - W256 2227693-1 On 05.09.2019, the Austrian DPA (DSB) notified the controller of a customer loyalty program that they were initiating an ex officio investigation. The controller responded byā¦ Sep 28, 2023
Supreme Administrative Court 6
1 As 183/2023-62 NSS - 1 As 183/2023-62 š„ 6 OAKS Consulting s.r.o. (the company) provided consulting services concerning market access conditions for medicinal products and medical devices. Pursuant to the Czech Act on Freeā¦ Aug 4, 2026
N. 501417 Council of State upholds CNIL cookie banner guidance: refusal via corner link as easy as Pour un RGPD RespectĆ©, a French NGO that advocates for GDPR compliance, and three individuals requested the CNIL, the DPA, to partially repeal its 2020 recommendation on cookiesā¦ Jun 19, 2026
N. 433539 French Supreme Admin Court partly upholds challenge to graduated response IP data decree Several digital rights organisations asked the Prime Minister to repeal Decree No. 2010-236 of 5 March 2010. The decree regulated an automated personal data processing system usedā¦ Apr 30, 2026
473833 French Supreme Court upholds ā¬8M CNIL fine against Apple for App Store ad tracking The DPA imposed an ā¬8 million administrative fine on Apple (the controller) in 2022 (CNIL - SAN-2022-025). The DPA found that Apple used identifiers stored on usersā devices toā¦ Oct 10, 2025
III OSK 5037/21 NSA - III OSK 5037/21 In March 2020, the Ombudsman requested the DPA to initiate proceedings regarding several laws that introduced an obligation for judges and prosecutors to declare their membershipā¦ Apr 29, 2025
451423 CE - 451423 The French DPA had received a complaint on 28 May 2018 regarding the lawfulness of processing by Amazon Europe Core ('Provider' or 'The company'). The French DPA had forwardedā¦ Jun 27, 2022
German Supreme Court 4
V ZB 90/25 BGH: Court must grant unredacted file access in compulsory auctions under Art. 6(1)(e) š„ 4 A prospective bidder in a compulsory auction wanted to find out who owned the property being sold and filed a request to inspect certain files with a court (the controller). Theā¦ May 21, 2026
VI ZR 375/24 German Supreme Court: No GDPR basis for debt transmission to credit agency; ā¬500 damages A debt collection agency (the controller) sent reminders to a customer (the data subject) for delayed installment payments related to a terminated electricity contract in Novemberā¦ May 12, 2026
VI ZR 109/23 BGH VI ZR 109/23 The data subject, a private individual, objected to the controllerās processing of their personal data. The controller, a commercial entity, had collected and processed the dataā¦ Jan 28, 2025
VI ZR 54/21 BGH: Publication of dentist profile on review site lawful under GDPR Art. 6(1)(f) The controller is a private company, running a compare-and-review website for healthcare practitioners. The data subject is a dentist, whose personal data (name, academic title,ā¦ Dec 13, 2022
CE 3
449209 CE - 449209 On 7 December 2020, the French DPA (CNIL) imposed two fines totaling ā¬ 100 million on Google LLC and Google Ireland Ltd for violating Article 82 of the French Data Protection Actā¦ Jan 28, 2022
439360 CE - 439360 In February 2020 the French minister of the interior enacted the Decree No. 2020-151 of 20 February 2020 authorising the automated processing of personal data known as "mobileā¦ Apr 13, 2021
449212 CE - 449212 On December, 7 2020, the French DPA imposed a financial penalty of 60 Million euros fine against Google LLC and a 40 million euros against Google Ireland Limited in accordanceā¦ Mar 4, 2021
Council of State 3
202307578/1/A3 Council of State: Tax Authority satisfied GDPR access request on FSV fraud registration The personal data of an individual was stored in the Fraud Detection System (FSV), an application used by the Dutch Tax Authority between 2012 and 2020 to record potentialā¦ Aug 5, 2026
202401622/1/A3 Council of State upholds ā¬600,000 DPA fine against Enschede for Wi-Fi tracking The Municipal Executive Board of Enschede, the controller, decided to conduct continuous pedestrian counts to obtain information about visitor numbers in the city centre. From 25ā¦ Jul 29, 2026
202203653/1/A3 RvS - 202203653/1/A3 The data subjectās personal data was processed by the Tax Administration because it suspected him of not fulfilling his tax obligations. This suspicion was raised after the Fiscalā¦ Nov 13, 2024
Supreme Court of the Netherlands 3
24/02161 Dutch Supreme Court: Bank may require online ID copy and selfie for AMLD compliance The data subject applied for a credit card in 2008 and was granted it. In July 2020, the bank (controller) requested that the data subject identify themselves online by providingā¦ Feb 21, 2025
ECLI:NL:PHR:2023:935 Hoge Raad - ECLI:NL:PHR:2023:935 The data subject, an asset management professional, undertook an agreement with PME Investment Services. The agreement was that the data subject would take over a housing projectā¦ Oct 20, 2023
22/01253 PHR - 22/01253 A patient (the data subject) was treated in a hospital. Because she believed that an error had been made, she held the hospital liable. The hospital involved its liabilityā¦ Aug 26, 2022
Austrian Administrative Supreme Court 2
VwGH Ro 2025/04/0007-7 VwGH - VwGH Ro 2025/04/0007-7 The controller was an address publisher and direct advertising company that operated a data application to provide advertisers with personal data for targeted marketing measures.ā¦ Jun 24, 2026
Ro 2022/04/0026 VwGH - Ro 2022/04/0026 The data subjects, joint operators of a hotel and restaurant business, ran their establishment through a family business. The controller operates an online travel platformā¦ May 17, 2024
BGH 2
BGH VI ZR 476/18 BGH refers to CJJH whether available interim injunction affects delisting balance under The applicant was an authorised officer of one of those companies. In 2015, several articles appeared on the website of a US-American company, whose objective, according to itsā¦ Jul 22, 2020
VI ZB 39/18 BGH - I ZR 7/16 See facts at the GDPRhub entry to the "Planet 49 case" (C-637/1/). The second checkbox containing a preselected tick used by the defendant (Planet 49) read as follows: {|ā¦ May 28, 2020
National Court 2
SAN 3154/2026 Spanish court reviews DPA decision on KFC Spain website privacy information and DPO In May 2021, a data subject lodged a complaint with the DPA against KFC Restaurants Spain, S.L.U., the controller, concerning the processing of personal data through its website.ā¦ Jul 16, 2026
SAN 2996/2026 Audiencia Nacional upholds ā¬2M AEPD fine against Amazon Flex for criminal-record checks UniĆ³n General de Trabajadores (UGT), a trade union, lodged a complaint with the DPA (AEPD) against Amazon Road Transport Spain, S.L., the controller. Applicants wishing to workā¦ Jul 8, 2026
Norges HĆøyesterett 2
2021-2403-A Norges HĆøyesterett - 2021-2403-A In 2012, a company "Legelisten.no AS" launched a website where people could submit anonymous reviews of healthcare personnel. From the same year, the Norwegian DPA Datatilsynetā¦ Dec 7, 2021
2019-1226-A Norges HĆøyesterett - 2019-1226-A The person was sent to prison for tax evasion in the years 2001 to 2006. The district court has assumed that A withheld share gains together about NOK 4.7 million and assets ofā¦ Jun 26, 2019
Supreme Administrative Court of Bulgariaā 2
8426/2026 Bulgarian SAC upholds lawfulness of criminal record checks for bank legal counsel role The data subject was a candidate for the position of senior legal counsel at the Bulgarian branch of the German commercial bank Flatex Degiro (the controller). As a prerequisiteā¦ Jul 30, 2026
7890/2026 Bulgarian SAC upholds DPA finding on neighbour's CCTV covering adjacent property A data subject lodged a complaint with the Bulgarian DPA (CPDP), alleging that her neighbour (the controller) was unlawfully monitoring her property through CCTV. She claimed thatā¦ Jul 13, 2026
Supreme Court 2
15625/2026 Supreme Court upholds ā¬300,000 fine against INPS for GDPR violations in COVID bonus data Istituto nazionale della previdenza sociale (INPS, the controller) is the Italian National Institute for Social Security. In 2021, the DPA fined the controller ā¬300,000 for itsā¦ May 21, 2026
III CZP 78/19 Supreme Court - III CZP 78/19 The parties were involved in social initiatives aimed at supporting or questioning the need for certain investments in the vicinity of the housing estate where they live. Theā¦ Aug 6, 2020
Administrative Court Berlin 1
42 K 25/25 VG Berlin - 42 K 25/25 A Jehovahās Witnesses congregation (the controller) sent another congregation an introductory letter containing the personal data of two members (the data subjects) who wereā¦ Jun 17, 2026
Administrative Court DĆ¼sseldorf 1
29 K 3490/24 VG DĆ¼sseldorf - 29 K 3490/24 A district (the controller), acting as the lower water authority, initiated administrative proceedings after identifying unauthorised riverbank works and a private jetty on twoā¦ Jun 22, 2026
Administrative Court in Rijeka 1
Us I-755/2025-8 USR - Us I-755/2025-8 The data subject was a member of the management board of ZagrebaÄki holding, a company owned by the City of Zagreb, from 3 September 2021 until 31 March 2023. A televisionā¦ Nov 11, 2025
Administrative Court Munich 1
M 26a K 25.5210 VG MĆ¼nchen - M 26a K 25.5210 The data subject had been liable to pay broadcasting contributions to the Controller, a German regional public broadcasting authority, since 2007. Following objections to severalā¦ May 18, 2026
Administrative Court of the Grand-Duchy of Luxembourg 1
49701C Cour Administrative - 49701C On 19 May 2020, a Luxembourg bank informed the complainant that, by 30 June 2020, they would transmit the complainant's bank account information to the Luxembourg fiscalā¦ Dec 12, 2024
Administrative Court Stuttgart 1
1 K 12737/25 VG Stuttgart - 1 K 12737/25 A resident of North Macedonia (the data subject) was expelled from German territory in September 2021, and a two-year ban on entry and residence was imposed on him. The dataā¦ Jul 14, 2026
BVerfG 1
1 BvR 2853/19 BVerfG - 1 BvR 2853/19 A data subject filed constitutional complaint because the AG Goslar (Goslar Local Court) denied his claims under Article 82 GDPR because of an unsolicited email. Because he onlyā¦ Jan 14, 2021
BVwG 1
W211 2230221-1 BVwG - W211 2230221-1 The data subject filed a complaint with the Austrian Data Protection Authority (DSB) against the controller, requesting to be provided with recipients to whom the personal dataā¦ Sep 3, 2021
Court of Appeal 1
EWCA Civ 899 Vince v. Associated Newspapers Limited CA - EWCA Civ 899 Vince v. Associated Newspapers Limited Associated Newspapers Limited, the controller, published print and online articles in the Daily Mail and Mail+ on 8 and 9 June 2023 concerning a data subject. The articles wereā¦ Jul 15, 2026
Court of Appeal Amsterdam 1
200.324.736/01 Amsterdam Court of Appeal: Controller may reject watermarked ID copy for verification The data subject had a business credit card issued by the controller. In 2021, the controller asked the data subject to identify themselves online by taking a picture of the IDā¦ Apr 30, 2024
District Court Amsterdam 1
781904 Amsterdam District Court: consumers seek access to INGāGoogle Pay data agreements ING Bank (the controller) is a bank. One of the services the controller offers is to make contactless payments using an Android phone. This was initially done through its own app,ā¦ Jul 16, 2026
District Court Den Haag 1
C/09/689833 Rb. Den Haag - C/09/689833 Kindred Group PLC and Risepoint Limited (the controllers) are companies that provide online gambling products. Several companies within Kindred Group PLC (Risepoint was initiallyā¦ May 27, 2026
District Court Noord-Holland 1
C/15/376188 Rb. Noord-Holland - C/15/376188 Rydo Telecom (the controller) is a telecommunications provider. In 2023, a data subject made an access request following a dispute with the controller on whether the data subjectā¦ Jul 13, 2026
District Court Overijssel 1
ZWO 25/2142 Rb. Overijssel: Police access request wrongly assessed under GDPR instead of Wpg On 5 January 2025, the data subject submitted an access request to the Chief of Police, the controller, concerning her personal data for the period between 1 January 2016 and 31ā¦ Jul 24, 2026
District Court Rotterdam 1
ROT 25/7371 Rotterdam Court: DPA did not err in finding ING contactless chip payments GDPR-compliant ING Bank N.V. (the controller) is a bank. In 2022, several data subjects brought a complaint to the DPA regarding the controllerās contactless payments. The data subjectsā¦ Jun 24, 2026
EWCA 1
A3/2015/307 EWCA - Dawson-Damer v Taylor Wessing LLP This case concerns a data subject access request (SAR) under the Data Protection Act (DPA) 1998. The data subjects were beneficiaries under a trust. The data controller was a firmā¦ Jul 17, 2026
EWHC (UK) 1
QB-2021-000923 EWHC (UK) - Johnson v Eastlight Community Homes Ltd The defendant is a provider of social housing, the claimant is one of its tenants. A third party requested a rent statement from the defendant. In response to the request, theā¦ Nov 16, 2021
Federal Court of Justice 1
VI ZR 97/22 BGH awards non-material GDPR damages for erroneous disclosure of applicant salary data An employee of a private bank (the controller) erroneously sent a third party a message that was intended for a candidate in the controllerās staff selection process (the dataā¦ Jun 23, 2026
First-Tier Tribunal 1
FT/EA/2024/0359 FTT: NMC should have neither confirmed nor denied holding struck-off nurse's personal data A doctor submitted a freedom of information request to the Nursing and Midwifery Council, the controller, asking whether a named nurse had been struck off the register forā¦ Jul 8, 2026
Gereral Court 1
T-318/24 GC - T-318/24 An applicant (the data subject) participated in several EU staff selection procedures administered by the European Personnel Selection Office (EPSO), acting as controller, andā¦ Dec 3, 2025
German Federal Administrative Court 1
6 C 1.24 BVerwG - 6 C 1.24 The data subject was employed by the German Federal Financial Supervisory Authority (BaFin), the public authority responsible for supervising banks, financial service providers,ā¦ Nov 5, 2025
German Federal Labour Court 1
8 AZR 169/25 BAG: Data subject not entitled to copies of compliance reports under Art. 15 GDPR A company (the controller) commissioned a law firm to conduct a compliance investigation into alleged misconduct of a manager (the data subject) in August 2023. The investigationā¦ Apr 16, 2026
GHARL 1
200.256.426 GHARL - 200.256.426 DFW (a Dutch movie distributor) applies a protocol to its processing of personal data which was approved by the Dutch DPA before the GDPR came into force. DFW asked Ziggo (anā¦ Nov 5, 2019
High Court of Justice of the Basque Country 1
1713/2026 TSJ PV: Accidental Teams recordings after meetings ended cannot justify trust-based The data subject had worked for Fineco Sociedad de Valores, SA and GIIC Fineco Sociedad Gestora de Instituciones de InversiĆ³n Colectiva, SAU, the controller, since 2004. The dataā¦ Jul 17, 2026
Higher Regional Court Cologne 1
15 W 55/26 OLG Kƶln - 15 W 55/26 The data subject, a doctor, sought an injunction against the Controller, the operator of an online review platform, requiring the removal of, and prohibiting the futureā¦ Jun 12, 2026
Higher Regional Court Munich 1
36 U 1054/25 e OLG MĆ¼nchen - 36 U 1054/25 e The data subject had used a social media platform operated by the controller, an Irish company, since 2013. The controller provided āBusiness Toolsā to third-party websiteā¦ Jun 26, 2026
Higher Regional Court Vienna 1
13R70/25x OLG Wien - 13R70/25x A data subject brought proceedings against a controller after it refused to provide, free of charge, digital copies of invoices and transaction data following an access request.ā¦ Dec 1, 2025
Hof van Beroep 1
2021/AR/1044 Court of Appeal of Brussels - 2021/AR/1044 The Belgian tax department appealed a decision of the Belgian DPA that was provisionally enforceable, and asked for the immediate suspension of the implementing measures alreadyā¦ Jul 16, 2021
Hof van Beroep Brussel 1
2019/AR/74 Court of Appeal of Brussels - 2019/AR/741 This case started as a conflict between neighbours. The controller (Y) and the data subject (X) are/were inhabitants of the same neighbourhood. The controller experienced nuisanceā¦ Jun 12, 2019
Hof van Justitie EU 1
HvJ EU: Privacy Shield ongeldig verklaard (Schrems II) Het Hof van Justitie verklaart het Privacy Shield-akkoord ongeldig wegens onvoldoende waarborgen voor Europese burgers tegen toegang door Amerikaanse inlichtingendiensten. Jul 16, 2020
LAG Schleswig-Holstein 1
6 Ta 49/22 LAG Schleswig-Holstein - 6 Ta 49/22 The controller operated a care service where the data subject was employed. The controller filmed the data subject in their work environment and published a thirty-six secondā¦ Jun 1, 2022
LG Frankfurt 1
2-03 O 4/19 LG Frankfurt - 2-03 O 4/19 Ī¤he wife of a well-known German presenter had filed an action for injunction against the publication of the plaintiff's picture in two magazines. The reason and content of theā¦ Dec 19, 2019
LG Kƶln 1
28 O 168/22 LG Kƶln - 28 O 168/22 The controller is an operator of a search engine. If a user used specific keywords in a name-based search, the search engine showed search results that contained the followingā¦ Jul 4, 2022
LG Rostock 1
3 O 762/19 LG Rostock - 3 O 762/19 The German consumer organisation Bundesverband der Verbraucherzentralen und VerbraucherverbƤnde - Verbraucherzentrale Bundesverband e.V. (vzbv, the claimant) filed a lawsuitā¦ Sep 15, 2020
Local Court Arnsberg 1
42 C 434/23 AG Arnsberg - 42 C 434/23 An Austrian citizen residing in Vienna (the data subject) subscribed to the newsletter of a family-run optician company (the controller) mainly operating in the German states ofā¦ Jul 1, 2026
Municipal Civil Court in Zagreb 1
Pn-877/2023-29 OGS Zagreb - Pn-877/2023-29 A data subject filed a lawsuit against Propuls d.o.o., the controller and publisher of the news portal direktno.hr, claiming that two articles published on 11 January 2023 and 31ā¦ Jan 16, 2026
OVG Berlin 1
OVG 3 S 24/20 OVG Berlin - OVG 3 S 24/20 A student, his/her parents and the school authority communicated a lot, this communication was requested to be deleted from the studentĀ“s file, as well as a copy of one reportā¦ Jul 1, 2020
PVN 1
2018-14 (15/01355) Personvernnemnda (Norway) - 2018-14 (15/01355) In 2017, the Norwegian DPA Datatilsynet found that a company "Legelisten", running an anonymous review website of healthcare personnel, lacked a legal basis for processing andā¦ Jan 21, 2019
Rb. Midden-Nederland 1
UTR 21/3403 Tax data sharing from FIOD criminal probe to Tax Authority not GDPR erasure violation The controller is the Minister of Finance. The data subjectās personal data was processed by the Tax Authority because it suspected him of not fulfilling his tax obligations. Thisā¦ May 9, 2022
Rb. Noord-Holland 1
AWB-20_2618 Rb. Noord-Holland - AWB-20 2618 The plaintiff received a tax assessment from the Dutch Tax and Customs Administration (i.e. a letter in which it tells you how much you have to pay). She didnāt agree with itsā¦ Oct 27, 2020
Regional Administrative Court Bratislava 1
BA-6S/221/2019 X - BA-6S/221/2019 SociĆ”lna poisÅ„ovÅa, the social insurance agency (the controller), processes applications for foreign invalidity pensions and forwards related documents to the social insuranceā¦ Jun 25, 2025
Regional Court in Warsaw 1
III C 904/23 SO Warszawa - III C 904/23 The Financial Ombudsmanās office (the controller) sent a letter containing the name, the address, and the case reference number of a customer (the data subject) to 28,366 publicā¦ Feb 16, 2026
Sibiu Tribunal 1
703/2026 Sibiu Tribunal: CNCF denied CCTV access request; court rules on immaterial damage claim On 5 June 2025, an individual (the data subject) made an access request under Article 15 GDPR to the Romanian National Railways Company, Societatea NaČionalÄ de CÄi Ferate SA (theā¦ Jul 3, 2026
Superior Administrative Court Saarlouis 1
2 A 165/24 OVG Saarlouis - 2 A 165/24 The data subject was an employee, the controller was the employer. On 14 January 2022, the data subject requested access to personal data from the controller under Article 15ā¦ May 13, 2025
Supreme Administrative Court of Finland 1
HFD:2021:125 Korkein hallinto-oikeus (Finland) - KHO:2021:125 The Regional Government of Ć
land had appointed Mr A as head of the regional Ć
landic DPA for a probationary period of one year. Pursuant to section 10(2) of the Act on Publicā¦ Sep 10, 2021
Svea Court of Appeal 1
T 10711-21 Svea Court of Appeal: Bank must provide voice recording, not just transcript, under GDPR The data subject was a client of a bank (the controller). In 2020, the controller terminated their bank account based on "poor customer knowledge". Consequently the data subjectā¦ Oct 7, 2022
Tribunal of Bologna 1
RG 12124/2020 Trib. of Bologna - RG 12124/2020 A data subject made an access request to Comet s.p.a., the controller, to verify the lawfulness of the processing of her personal data for marketing purposes. In particular, sheā¦ Jul 30, 2022
VG Ansbach 1
14 K 19.01274 VG Ansbach - 14 K 19.01274 In December 2018, the data subject filed with the DPA (the defendant in this case), a complaint under Article 77 GDPR against a lawyer who had represented the data subject in aā¦ Sep 22, 2021