One, Two, Three… Fault? CJEU Rules on Civil Liability Requirements under the GDPR
Marco Buzzoni, Doctoral Researcher at the Luxembourg Centre for European Law (LCEL) and PhD candidate at the Sorbonne Law School, offers a critical analysis of some recent rulings by the Court of Justice of the European Union in matters of data protection.
In a series of three preliminary rulings issued on 14th December and 21st December 2023, the Court of Justice of the European Union (‘CJEU’) was called upon again to rule on the interpretation of Article 82 of the General Data Protection Regulation (‘GDPR’). While these rulings provide some welcome clarifications regarding the civil liability of data controllers, their slightly inconsistent reasoning will most likely raise difficulties in future cases, especially those involving cross-border processing of personal data.