Profit-making model for mass GDPR claims lands at EU's top court
( August 17, 2026, 09:34 GMT | Official Statement) -- MLex Summary: A for-profit claims company’s pursuit of GDPR damages in Germany has landed at the EU’s highest court. Judges have been referred a question from the Leipzig regional court, which has been hearing a case involving German debt-collection agency Protectra seeking compensation after the personal data of more than 50 customers was compromised in a cyberattack. Protectra pooled the claims and is litigating them in its own name. The EU Court of Justice is asked to decide whether such a profit-making model is in line with EU privacy law.The summary of the reference for a preliminary ruling is attached. Case reference is Case C‑323/26....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.