PS (Adresse erronee) (Protection of natural persons with regard to the processing of personal data - Protection of natural persons with regard to the processing of personal data - Right to compensation for damage caused by data processing that infringes that regulation - Concept of 'non-material damage' - Judgment) [2024] EUECJ C-590/22 (20 June 2024)
Article 82(1) GDPR does not grant a right to compensation for mere infringement; actual damage must be proven, but no threshold of seriousness is required. Fear of data disclosure can be compensable if proven with negative consequences. Criteria for administrative fines and deterrent/punitive purposes do not apply to compensation assessment. Simultaneous breach of national law not specifying GDPR rules does not affect compensation under Article 82(1).
- Citation
- [2024] EUECJ C-590/22
- Parties
- Applicant: AT; Applicant: BT; Respondent: PS GbR; Respondent: VG; Respondent: MB; Respondent: DH; Respondent: WB; Respondent: GS
- Jurisdiction
- European Union
- Judgment Date
- 20 June 2024
- Procedural Posture
- Preliminary Ruling (cjeu) / Judgment on Reference
- Outcome
- Questions answered; guidance provided to referring court.
- Legal Topics
- GDPR Article 82, Compensation for Non Material Damage, Personal Data Breach, Criteria for Damages Assessment, Interaction With National Law
Case Brief
Summary, issues, holding and outcome
More case intelligence is available
Unlock the full research layer for this judgment.
Parties
AT
Applicant
BT
Applicant
PS GbR
Respondent
VG
Respondent
MB
Respondent
DH
Respondent
WB
Respondent
GS
Respondent
Procedural Posture
Preliminary Ruling (cjeu) / Judgment on Reference
Legal Issues
- 1 Whether infringement of GDPR alone gives right to compensation under Article 82(1)
- 2 Whether non-material damage must reach a certain seriousness
- 3 Whether fear of data disclosure constitutes compensable damage
Ratio Decidendi
Article 82(1) GDPR does not grant a right to compensation for mere infringement; actual damage must be proven, but no threshold of seriousness is required. Fear of data disclosure can be compensable if proven with negative consequences. Criteria for administrative fines and deterrent/punitive purposes do not apply to compensation assessment. Simultaneous breach of national law not specifying GDPR rules does not affect compensation under Article 82(1).
Court Disposition
Questions answered; guidance provided to referring court.
Orders
- Article 82(1) GDPR requires proof of damage caused by infringement, not mere infringement.
- No seriousness threshold for non-material damage under Article 82(1) GDPR.
Full Case Text
Judgment text and source record
Sign in to read
Sign in to read the full judgment text
Sign in to read the full judgment text. Downloads and additional research tools may depend on your plan.
Sign in to read the full judgment