European Union: Lawsuit concerning General Data Protection Regulation obligations in judicial use of unlawfully collected personal data (NTH Haustechnik GmbH v EM/C-484/24)

Progress

Current status
in force
18 Jun 2026 in force

Scope

Implementers
Austria
Belgium
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Government Branch
judiciary
Government Body
court
Implementation Level
supranational

Timeline of events

18 Jun 2026
in force

Court of Justice of the European Union ruled that national courts may use unlawfully collected personal data as evidence subject to data minimisation requirements

On 18 June 2026, the Court of Justice of the European Union (CJEU) issued a preliminary ruling in Case C-484/24, referred by the Higher Labour Court of Lower Saxony, Germany, concerning the application of Regulation (EU) 2016/679 (General Data Prote…

Event type civil lawsuit
Action type ruling
Government branch judiciary
Government body court