Share on LinkedInShare on LinkedIn

ARTICLE · 29 JANUARY 2026

Market Intelligence Thought Leadership Award Winner

Signposts From Luxembourg: GDPR Judgments From EU Courts In 2025

McCann FitzGerald LLP
McCann FitzGerald LLP
Contributor
McCann FitzGerald LLP

McCann FitzGerald LLP

McCann FitzGerald LLP’s London office acts for Irish, UK and international clients on Irish law...

View firm profile
Explore more from McCann FitzGerald LLP

In 2025, the EU Court of Justice ("ECJ") and the General Court of the EU ("General Court") delivered several judgments that further refine and reinforce the contours of data protection law.

IrelandPrivacy
Adam Finlay
Adam Finlay
Paul Lavery
Paul Lavery
Doug McMahon
Doug McMahon

In 2025, the EU Court of Justice (“ECJ”) and the General Court of the EU (“General Court”) delivered several judgments that further refine and reinforce the contours of data protection law.

The following briefing highlights the key cases and emerging themes shaping how organisations navigate the interpretation and application of the GDPR across the EU.<

Definition of Personal Data

EDPS v SRB (C-413/23), 4 September 2025: The ECJ explicitly held for the first time that data which is sufficiently pseudonymised by an organisation may continue to be personal data for the original controller, but be anonymised data for a recipient who cannot re-identify the individuals concerned. This brought welcome clarity that the concept of personal data is not absolute.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

The Data Act – Part I: Key Considerations Regarding Data Access And Sharing

The EU Data Act, which became applicable on 12 September 2025, fundamentally reshapes how businesses handle data generated by connected devices and related services. With Ireland's General Scheme published in February 2026 designating ComReg and CCPC as enforcement authorities, companies must now assess their compliance obligations across data sharing frameworks, contractual terms, and user access rights or face significant fines.
IrelandPrivacy
Matheson
Matheson
Article

The Data Act – “Access By Design” Requirement Comes Into Force

The European Union's Data Act introduces a groundbreaking "access by design" requirement that fundamentally changes how manufacturers must approach product development for connected devices and IoT products. From September 2026, businesses placing connected products on the EU market must ensure users can directly access their generated data by default, shifting data accessibility from a reactive request-based model to a proactive design imperative.
IrelandPrivacy
Matheson
Matheson
Article

The Data Act: “Access By Design” Requirement Comes Into Force For Medical Devices

The Data Act's "access by design" requirement came into force on 12 September 2026, mandating that manufacturers of connected products and providers of related services must enable direct user access to generated data by default. This article examines the scope of this new obligation and its practical implications for businesses in the Life Sciences sector, particularly those developing medical devices and Internet of Things products.
IrelandPrivacy
Matheson
Matheson
Article

Gatekeeping Justice: What 153 Supreme Court Determinations In 2025 Tell Us About Likely Trends For 2026

This article examines the Supreme Court's evolving role following Ireland's 2014 constitutional amendment, analyzing how the establishment of the Court of Appeal transformed the Supreme Court into a specialized tribunal for cases of exceptional public importance. Through a comprehensive review of 153 determinations made in 2025, the analysis explores the criteria for securing leave to appeal and identifies emerging trends in the application of the "Karshan factor" for leapfrog appeals.
IrelandLitigation, Mediation & Arbitration
McCann FitzGerald LLP
McCann FitzGerald LLP