Search results

CJEU - C-311/18 Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems Court: CJEU Jurisdiction: European Union Relevant Law:

of Article 3 and the provisions on international transfers as per Chapter V of the GDPR The GDPR does not provide a definition of 'establishment' for the

exercise of their powers. The CJEU clarified, in Bank Austria Creditanstalt v Commission, that information will be considered confidential if it fulfils

processors (Article 28); safeguards surrounding international transfer(s) (Chapter V); prior consultation (Article 36). risks to the rights and freedoms of data

Passenger Name Records. The transfers based on other provisions of Chapter V, such as adequacy decisions, standard contractual clauses and binding corporate

of dispute resolution. This reading is supported by the Court in Commission v Germany, which interpreted the phrase “complete independence” in the context

number 2 (C. H. Beck 2020, 3rd edition) citing CJEU, C-193/18, Google LLC v Bundesrepublik Deutschland, 13 June 2019 (available here), and CJEU, C-142/18

first take place before the Small Claims Court. The EWCA in Open Rights Group v Secretary of State for the Home Department helpfully summarised the approach

transfers to third countries or international organisations under Chapter V of the GDPR (Article 44 et seq. GDPR). The GDPR only requires that a SA is

exchange of information and best practices between the supervisory authorities; (v) promote common training programmes and facilitate personnel exchanges between

Article 30, margin number 19 (C.H.Beck 2020, 3rd Edition). CJEU, C-154/21, RW v Österreichische Post, 12 January 2023, among the others, margin number 24 (available

ensuring compliance with data transfer requirements for third countries (Chapter V), and organizing communication with data subjects and supervisory authorities

transfers to non-EU/EEA countries ('third countries') can be found in Chapter V of the GDPR. Example: When a Czech controller is storing personal data with

identified; (iv) how serious the consequences of the breach are to individuals; (v) whether individuals affected are particularly vulnerable; (vi) whether the

The CJEU issued its first judgment on non-material damages under Article 82 GDPR. It was ruled that there is no threshold for non-material damages for

international organisations, taking into account the provisions of Chapter V of the GDPR. If the instructions by the controller "do not allow for transfers

CJEU - C-487/21 F.F. v DSB Court: CJEU Jurisdiction: European Union Relevant Law: Article 15(3) GDPR Decided: 04.05.2023 Parties: DSB (Austria) Case Number/Name:

CJEU - C-154/21 RW v Österreichische Post Court: CJEU Jurisdiction: European Union Relevant Law: Article 5(1)(a) GDPR Article 12(5)(b) GDPR Article 15(1)(c)

application of Chapter V of the GDPR First, it must be verified whether the first respondent is subject to the obligations standardized in Chapter V of the Regulation

Cases C‑92/09 and C‑93/09, Volker und Markus Schecke GbR and Hartmut Eifert v Land Hessen, paragraph 86, 9. November 2010 (available here). EDPB, ‘Guidelines