Processing is only legal if it meets one of six bases, such as consent or "legitimate interests".
In UI v Österreichische Post AG (C-300/21), the court held that mere infringement is not enough to warrant compensation; there must be actual damage, though there is no "seriousness" threshold. A later ruling (C-340/21) confirmed that a well-founded fear of data misuse can qualify as non-material damage. Summary Table of Landmark EU Case Laws Relevant Article Key Ruling / Impact Schrems II (C-311/18) Art. 44–46 GDPR Articles With Commentary & EU Case Laws
The General Data Protection Regulation (GDPR) serves as the primary legal framework for data privacy in the European Union, with its 99 articles interpreted through evolving case law from the Court of Justice of the European Union (CJEU) . Key GDPR Articles and Commentary Processing is only legal if it meets one
In Schrems v Meta (C-446/21), the CJEU emphasized data minimisation , ruling that personal data cannot be processed indefinitely for targeted advertising without strict temporal limits. Article 6: Lawfulness of Processing Summary Table of Landmark EU Case Laws Relevant