|Blog & Commentary, News, Overview
Information Guide concerning Case C-319/20 from the Court of Justice of the European Union (CJEU), which relates to the protection of natural persons with regard to the processing of personal data.
Meta Platforms Ireland - formerly Facebook Ireland Limited - is the controller of the personal data of user of the online social network Facebook in the European Union (EU). Germany's Federal Union of Consumer Organisations and Associations brought an action for an injunction against Meta, alleging that it had infringed rules on the protection of personal data, the combat of unfair commercial practices and consumer protection, in the context of making available to users free games provided by third parties.
The German Federal Court of Justice showed doubts as to the admissibility of the action, despite being well founded. The Court therefore asked the CJEU whether, following the entry into force of the General Data Protection Regulation (GDPR), a consumer protection association still has the standing to bring proceedings in the civil courts against infringements of that regulation. It also observes that it can be inferred from the GDPR that is principally for the supervisory authorities to verify the application of the provisions of that regulation.
The CJEU ruled on 28 April 2022 that consumer protection associations may bring representative actions against infringements of personal data protection. The Court added that such an action may be brought independently of the specific infringement of a data subject's right to the protection of their personal data and in the absence of a mandate to that effect.
|Internal Markets, Law, Values and Beliefs
|Consumer Rights | Protection, EU Law
|CJEU Judgements, Data Privacy | Protection, General Data Protection Regulation [GDPR]
|Countries / Regions
|European Union [EU]