By judgment of 27 September 2017 (ECLI:EU:C:2017:725) the Court held that requiring exhaustion of administrative remedies before a data-protection claim reaches a court is compatible with Article 47 of the Charter if it causes no substantial delay or…
By judgment of 4 May 2017 (ECLI:EU:C:2017:336) the Court ruled, in the words of the operative part: “Article 7(f) of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the…
On 28 July 2016 the Court ruled (ECLI:EU:C:2016:612) that in a collective injunction action the law applicable to assessing contract terms is determined by the Rome I Regulation even though the action itself falls under Rome II.
Can the Dutch Data Protection Agency exert any control over companies based in the UK and the USA which conduct covert surveillance on Dutch territory? And in the event of an individual’s data processing law rights under Dutch law being … Continue reading → Continue reading →
By judgment of 19 October 2016 (ECLI:EU:C:2016:779) the Court held that a dynamic IP address registered by a website operator is personal data where the operator has legal means to have the visitor identified via the access provider.
By judgment of 1 October 2015 (ECLI:EU:C:2015:639) the Court gave "establishment" a broad, flexible reading: even minimal real and effective activity through stable arrangements — a Hungarian-language property site, a local representative, a Hungarian bank…
By judgment of 11 December 2014 (ECLI:EU:C:2014:2428) the Court held that camera surveillance covering, even partially, a public space falls outside the "purely personal or household" exemption, so data-protection law applies to a home CCTV system filming…
The reference was decided in the joined Willems judgment of 16 April 2015 (ECLI:EU:C:2015:238): the fingerprint obligation for passports stands (as upheld in Schwarz), and Regulation 2252/2004 does not govern any subsequent storage or use of the biometrics…
On 13 May 2014 the Grand Chamber delivered one of the most consequential judgments in EU law (ECLI:EU:C:2014:317): a search engine is a controller processing personal data when it indexes the web, the Directive reached Google through its Spanish…
On 17 July 2014 the Court ruled (ECLI:EU:C:2014:2081) that the legal analysis in an immigration case minute is not itself personal data — the applicant's data contained in it are — and that the right of access can be satisfied by a full and intelligible…