EU Court Clarifies Direct Marketing and Soft Opt-In for Email Newsletters
The Court confirmed unsolicited newsletters promoting paid services fall under e-Privacy Directive’s direct marketing rules, overriding GDPR’s general lawfulness conditions.
CJEU
CJEU confirms GDPR compensation cannot be replaced by prohibitory injunctions
The CJEU rules prohibitory injunctions cannot reduce or replace GDPR compensation for past non‑material damage from unlawful data disclosures, reaffirming a distinct compensatory right.
Advocate General: Legal recognition of gender identity must not be conditioned on surgery
EU law may bar national rules requiring surgery to change gender markers in civil documents, protecting free movement, privacy and accurate identity data.
CJEU clarifies GDPR remedies and compensation for moral harm
The CJEU ruled GDPR does not create a mandatory right to a preventive injunction but allows compensation for moral harm even for non‑serious distress, and injunctions cannot replace damages.
Court of Justice clarifies identifiability under GDPR
Court of Justice rules SRB should have informed Banco Popular claimants before sharing their comments, clarifies assessment of pseudonymisation and controller-focused identifiability under EU data law.
Austrian court: Der Standard broke GDPR with pay-or-consent model
The Austrian Federal Administrative Court confirmed that newspaper Der Standard breached the EU’s data protection rules by using a “pay […]
Belgian Court Partially Overturns APD Decision on IAB Europe’s GDPR Joint Controllership
The Belgian Market Court annulled part of the APD’s decision on IAB Europe’s TCF, limiting its joint controllership to TC Strings only, aligning with the CJEU ruling.
CJEU Advocate General Backs WhatsApp in €225 Million EDPB Fine Dispute
WhatsApp receives support from a CJEU adviser in its challenge against the EDPB over a €225 million fine for privacy violations.
French MP Latombe Could Bring Down EU-US Data Privacy Framework
Philippe Latombe’s legal challenge to the Trans-Atlantic Data Privacy Framework raises questions about EU-US data transfers and potential implications for data protection.
EDPB Adopts Statement on PNR Directive Implementation
The EDPB adopted a statement on the PNR Directive, urging EU countries to implement changes in line with the CJEU’s judgment to enhance passenger data protection.
EU Court Upholds EDPB’s Authority Over Irish DPC
The European General Court supports the EDPB’s authority, requiring Ireland’s DPC to conduct separate investigations into Meta’s data processing, reinforcing GDPR enforcement.
Train Companies Cannot Require Gender Information, Says EU Court
The European Court of Justice ruled that train companies cannot require gender identification for ticket purchases, promoting inclusivity and privacy rights.