CJEU has issued a ruling that could impact Meta’s ability to track user data across its platforms without explicit consent.
Advocate General released an opinion on the concepts of “controller”, “joint controller” and “processor”, and also liability system established by the GDPR.
Advocate General of CJEU examined the interpretation of the civil non-material right to damages and duty of care concerning technical and organisational measures under.
Whilst Member States have discretion over whether they adopt specified rules, such rules must prioritize protecting employees' fundamental rights to privacy.
EU Court emphasized that the transmission of pseudonymized data to a data recipient will not be considered personal data if the recipient cannot re-identify the data subjects.