The Court of Justice of the European Union (CJEU), in its judgment of 26 September 2024 in case C-768/21, ruled that data protection authorities are not obligated to impose administrative fines for every breach of the GDPR, the General Data Protection Regulation. This decision highlights the discretionary nature of the measures that supervisory authorities can adopt, […]
Category Archives: Privacy & identity
Italy’s DPA opinion on the Italian AI bill: yes, but with adjustments
The opinion no. 477 issued on 2 August 2024 by the Italian Data Protection Authority (DPA) expresses its opinion on the Italian AI Bill “Schema di disegno di legge recante disposizione e deleghe in materiale di intelligenza artificiale” (Bill outline stating orders and authorizations on AI). Having examined the individual rules proposed in the bill […]
Court of Justice of the European Union: yes to damage compensation for theft of personal data from an app
On June 20, 2024, the Court of Justice of the European Union (CJEU) issued a significative decision on the right to compensation of damages caused by the breach of the General Data Protection Regulation (EU Reg. 2016/679 GDPR). The decision came from the preliminary ruling requests proposed by the Court of Munich (Amtsgericht München) in […]
Data Breach: the EU Court of Justice affirms the refundability of a non-pecuniary damage
On December 14 2023, the EU Court delivered a preliminarily judgement on case C-340/21 upon request of the Bulgarian Supreme Court, stating that the infringement of the principles established by the GDPR entails the compensation for the damages, also non-material ones, suffered by the interested party. Therefore, in case of data breach, the controller of […]