European Union: CJEU ruling on powers of non-leading data protection authorities regarding cross-border processing of data
Progress
Current status
in force
15 Jun 2021 in force
Scope
Implementers
Austria
Belgium
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Government Branch
judiciary
Government Body
court
Implementation Level
supranational
Timeline of events
CJEU ruling clarifying conditions for the exercise of national data protection authorities' powers on cross-border processing of data
On 15 June 2021, the CJEU issued a decision in Case C-645/19 Facebook Ireland vs Belgian Privacy Commission. In particular, the Court assessed whether the General Data Protection Regulation (GDPR) permits a Data Protection Authority (DPA), that is n…
SourceEvent type
public lawsuit
Action type
ruling
Government branch
judiciary
Government body
court