Court rulings on the GDPR
Decisions grouped by the exam chapters stored with the practice questions. Each card names the court, the case number and the date. The sentence is copied from a guide on this site. It is not an official headnote. Chapter titles stay in German, because that is how they are stored.
DSGVO Grundlagen & Prinzipien
EuGH 04.09.2025EuGH, C-413/23 P
4 September 2025 judgment in Case C-413/23 P, EDPS v SRB (paragraph 111).
Read the rulingBetroffenenrechte (Art. 12–22 DSGVO)
EuGH 19.03.2026EuGH, C-526/24
The CJEU confirmed in Case C-526/24 that a breach of the right of access can itself trigger an Article 82 damages claim, independent of any unlawful processing.
Read the rulingPflichten des Verantwortlichen & Auftragsverarbeitung
EuGH 16.07.2020EuGH, C-311/18
The CJEU annulled the original Safe Harbor framework in Schrems I (2015) and its successor Privacy Shield in Schrems II (2020), both times over concerns about US government surveillance access and the lack of an effec…
Read the rulingTechnisch-organisatorische Maßnahmen (TOMs)
EuGH 14.12.2023EuGH, C-340/21
The CJEU ruled in Case C-340/21 (Natsionalna agentsia za prihodite) that the occurrence of a data breach by third-party hackers does not automatically mean the controller’s security measures were inadequate under Arti…
Read the rulingAufsichtsbehörden, Sanktionen & Bußgelder
EuGH 04.05.2023EuGH, C-300/21
No formal threshold exists. The CJEU has twice rejected a "de minimis" requirement for non-material damage — first in Case C-300/21 (Österreichische Post, 4 May 2023) and again in Case C-655/23 (2025), which held that…
Read the rulingStand: 10/2026 · Wording follows the linked sources. Not legal advice.
Use the same chapters in practice questions
The rulings sit next to the chapters the exam questions already use.
Register free