CJEU Ruling On The Notion Of 'Processing' In The Context Of Mobile Apps

Ganado Advocates

European UnionPrivacy

The convergence of public health imperatives and individual data protection rights has come under scrutiny in a recent landmark case delivered on the 5 October 2023 by the European Court of Justice (ECJ), following a request for preliminary ruling made by RK and the Ministerstvo zdravotnictví (Ministry of Health, Czech Republic). The court, in case C-659/22, delved into the complexities surrounding 'processing' of personal data under the General Data Protection Regulation.

Legal Context

The General Data Protection Regulation (GDPR) stands as a cornerstone in safeguarding the fundamental rights of individuals concerning the processing of personal data. Personal data under the GDPR refers to any information relating to an identified or identifiable natural person and includes information such as names, identification numbers, location data, online identifiers, or factors specific to an individual's physical, physiological, genetic, mental, economic, cultural, or

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

CJEU Ruling On The Notion Of 'Processing' In The Context Of Mobile Apps

Legal Context

Related Articles

Understanding the New ‘Access by Design’ Requirements

When Does A Data Subject Access Request Become Excessive?

Building Trust At Scale: Data Protection Beyond The Privacy Policy

EDPB Adopts DPIA Template: A Step Toward Enhanced GDPR Compliance And Accountability

When AI And GDPR Intersect: A Regulator’s View | Sharon Xuereb With Ian Deguara (Podcast)

Read more about

Related Comparative Guides

Data Protection & Cybersecurity

See more popular content from

EU General Court Upholds The EU-US Data Privacy Framework

The European Data Protection Board Adopts New Guidelines On Consent

Inteligo Case: Direct Marketing, Free Accounts, EPrivacy And The GDPR

CJEU Invalidates The EU-US Privacy Shield Framework

The KNLTB Case: Legitimate Interests & AI

EDPB Guidelines Require Specific Details Of Security Measures For Data Processing Agreements

Understanding the New ‘Access by Design’ Requirements

Landmark CJEU Data Protection Judgement: EU-US Privacy Shield Declared Invalid

GDPR Liability For Online Marketplaces: No Safe Harbour Under The E-Commerce Directive

EDPB Adopts DPIA Template: A Step Toward Enhanced GDPR Compliance And Accountability