GDPR provides no judicial remedy to stop further unlawful data processing, EU court says
( September 4, 2025, 12:37 GMT | Official Statement) -- MLex Summary: The EU's data protection rules don't, on their own, grant individuals harmed by unlawful personal data processing — if they haven’t requested erasure of their data — an injunction that would allow them to obtain an order preventing the controller from carrying out further unlawful processing, the EU's top court said today. Today's verdict follows questions referred by Germany's Federal Court of Justice in a dispute involving Quirin Privatbank, which disclosed sensitive personal data of a job applicant to a third party during a hiring process. The judgment is attached. The case reference is C-655/23....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.