Data protection case law Court of Justice

Responsibility of the controller

2 pending referrals

Referral C-492/23 (Russmedia Digital and Inform Media Press, 3 Aug 2023)


Referral C-340/21 (Natsionalna agentsia za prihodite, 2 Jun 2021)


1 preliminary ruling

of 27 Oct 2022, C-129/21 (Proximus)

Article 5(2) and Article 24 of Regulation 2016/679must be interpreted as meaning that a national supervisory authority may require that the provider of publicly available telephone directories and directory enquiry services, as controller, take appropriate technical and organisational measures to inform third-party controllers, namely the telephone service operator that has communicated its subscriber’s personal data to that provider and the other providers of publicly available telephone directories and directory enquiry services to which that provider has itself supplied such data, of the withdrawal of the subscriber’s consent.


Disclaimer