{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-414-24","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-414-24)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-23","fingerprint":"ewai:eu:b67bfc","proof":"sha256:7187127f904bb2ae1082df64004ab946bbd2af108dc695cbb02fb65d049a2d22","jurisdiction":"eu","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","item":{"schema_version":"1.0.0","id":"eu:c-414-24","jurisdiction":"eu","lang":"en","brand_source":"Source: NovaCopilot","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"sections":[{"title":"Provisional text","paragraphs":[]},{"title":"JUDGMENT OF THE COURT (First Chamber)","paragraphs":[]},{"title":"18 June 2026 ( * )","paragraphs":["para_4","para_5","para_6","para_7"]},{"title":"Dr. G S","paragraphs":["para_9","para_10","para_11","para_12","para_13","para_14","para_15","para_16","para_17","para_18","para_19","para_20","para_21","para_22","para_23","para_24","para_25","para_26"]},{"title":"Judgment","paragraphs":["para_28","para_29"]},{"title":"Legal context","paragraphs":[]},{"title":"European Union law","paragraphs":[]},{"title":"3         Recitals 10, 11, 129 and 141 of the GDPR state:","paragraphs":["para_33","para_34","para_35","para_36","para_37","para_38","para_39","para_40","para_41","para_42","para_43"]},{"title":"6         Article 57(1)(f) of that chapter, entitled ‘Tasks’, is worded as follows:","paragraphs":["para_45","para_46","para_47"]},{"title":"7         Article 58(2) of the GDPR, entitled ‘Powers’ provides:","paragraphs":["para_49","para_50","para_51","para_52","para_53","para_54"]},{"title":"(f)      to impose a temporary or definitive limitation including a ban on processing;","paragraphs":["para_56","para_57","para_58","para_59","para_60","para_61","para_62","para_63","para_64","para_65","para_66","para_67","para_68","para_69","para_70","para_71","para_72"]},{"title":"Austrian law","paragraphs":["para_74","para_75","para_76","para_77","para_78","para_79","para_80"]},{"title":"The dispute in the main proceedings and the questions referred for a preliminary ruling","paragraphs":["para_82","para_83","para_84","para_85","para_86","para_87","para_88","para_89","para_90","para_91","para_92","para_93","para_94","para_95","para_96","para_97","para_98","para_99"]},{"title":"The questions referred for a preliminary ruling","paragraphs":["para_101","para_102","para_103","para_104","para_105","para_106","para_107","para_108","para_109","para_110","para_111","para_112","para_113","para_114","para_115","para_116","para_117","para_118","para_119","para_120","para_121","para_122","para_123","para_124","para_125","para_126","para_127","para_128","para_129"]},{"title":"Costs","paragraphs":["para_131"]},{"title":"On those grounds, the Court (First Chamber) hereby rules:","paragraphs":["para_133","para_134","para_135","para_136"]}],"paragraphs":[{"text":"Provisional text","paragraph_id":"para_1"},{"text":"JUDGMENT OF THE COURT (First Chamber)","paragraph_id":"para_2"},{"text":"18 June 2026 ( * )","paragraph_id":"para_3"},{"text":"( Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Articles 77 and 79 – Remedies – Parallel exercise – Relationship between the lodging of a complaint with a national supervisory authority and the exercise …","paragraph_id":"para_4"},{"text":"In Case C‑414/24,","paragraph_id":"para_5"},{"text":"REQUEST for a preliminary ruling under Article 267 TFEU from the Verwaltungsgerichtshof (Supreme Administrative Court, Austria), made by decision of 17 May 2024, received at the Court on 13 June 2024, in the proceedings","paragraph_id":"para_6"},{"text":"Datenschutzbehörde,","paragraph_id":"para_7"},{"text":"Dr. G S","paragraph_id":"para_8"},{"text":"other party:","paragraph_id":"para_9"},{"text":"Bundesministerin für Justiz,","paragraph_id":"para_10"},{"text":"D GmbH,","paragraph_id":"para_11"},{"text":"THE COURT (First Chamber),","paragraph_id":"para_12"},{"text":"composed of F. Biltgen, President of the Chamber, I. Ziemele (Rapporteur), A. Kumin, S. Gervasoni and M. Bošnjak, Judges,","paragraph_id":"para_13"},{"text":"Advocate General: J. Richard de la Tour,","paragraph_id":"para_14"},{"text":"Registrar: A. Calot Escobar,","paragraph_id":"para_15"},{"text":"having regard to the written procedure,","paragraph_id":"para_16"},{"text":"after considering the observations submitted on behalf of:","paragraph_id":"para_17"},{"text":"–         the Datenschutzbehörde, by M. Schmidl and E. Wagner,","paragraph_id":"para_18"},{"text":"–        Dr. G S, by S. Binder-Novak, Rechtsanwältin,","paragraph_id":"para_19"},{"text":"–        D GmbH, by S. Korab, Rechtsanwalt,","paragraph_id":"para_20"},{"text":"–        the Austrian Government, by A. Posch, J. Schmoll and C. Gabauer, acting as Agents,","paragraph_id":"para_21"},{"text":"–        the Italian Government, by S. Fiorentino, acting as Agent, and by E. De Bonis, avvocato dello Stato,","paragraph_id":"para_22"},{"text":"–        the Hungarian Government, by Zs. Biró-Tóth and M.Z. Fehér, acting as Agents,","paragraph_id":"para_23"},{"text":"–        the European Commission, by A. Bouchagiar, M. Heller and H. Kranenborg, acting as Agents,","paragraph_id":"para_24"},{"text":"after hearing the Opinion of the Advocate General at the sitting on 4 September 2025,","paragraph_id":"para_25"},{"text":"gives the following","paragraph_id":"para_26"},{"text":"Judgment","paragraph_id":"para_27"},{"text":"1         This request for a preliminary ruling concerns the interpretation of Article 77 and 79 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1) (‘the GDPR’).","paragraph_id":"para_28"},{"text":"2         The request has been made in proceedings between Dr. G S and the Datenschutzbehörde (Data Protection Authority, Austria) (‘the DSB’) concerning the rejection by that authority of the complaint lodged by Dr. G S, alleging a breach of her right to the protection of personal data concerning her, on the ground that the data subject had already brought judicial proceedings concerning the same subject matter and remained pending before the court seised.","paragraph_id":"para_29"},{"text":"Legal context","paragraph_id":"para_30"},{"text":"European Union law","paragraph_id":"para_31"},{"text":"3         Recitals 10, 11, 129 and 141 of the GDPR state:","paragraph_id":"para_32"},{"text":"‘(10)      In order to ensure a consistent and high level of protection of natural persons and to remove the obstacles to flows of personal data within the Union, the level of protection of the rights and freedoms of natural persons with regard to the processing of such data should be equivalent in …","paragraph_id":"para_33"},{"text":"(11)      Effective protection of personal data throughout the Union requires the strengthening and setting out in detail of the rights of data subjects and the obligations of those who process and determine the processing of personal data …","paragraph_id":"para_34"},{"text":"…","paragraph_id":"para_35"},{"text":"(129)      In order to ensure consistent monitoring and enforcement of this Regulation throughout the Union, the supervisory authorities should have in each Member State the same tasks and effective powers, including powers of investigation, corrective powers and sanctions, and authorisation and adv …","paragraph_id":"para_36"},{"text":"…","paragraph_id":"para_37"},{"text":"(141)      Every data subject should have the right to lodge a complaint with a single supervisory authority, in particular in the Member State of his or her habitual residence, and the right to an effective judicial remedy in accordance with Article 47 of the [Charter of Fundamental Rights of the E …","paragraph_id":"para_38"},{"text":"4         Article 17 of the GDPR, entitled ‘Right to erasure (“right to be forgotten”)’ provides, in paragraph 1(d):","paragraph_id":"para_39"},{"text":"‘The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:","paragraph_id":"para_40"},{"text":"…","paragraph_id":"para_41"},{"text":"(d)      the personal data have been unlawfully processed’.","paragraph_id":"para_42"},{"text":"5         Chapter VI of the GDPR, entitled ‘Independent supervisory authorities’, includes Articles 51 to 59 of that regulation.","paragraph_id":"para_43"},{"text":"6         Article 57(1)(f) of that chapter, entitled ‘Tasks’, is worded as follows:","paragraph_id":"para_44"},{"text":"‘Without prejudice to other tasks set out under this Regulation, each supervisory authority shall on its territory:","paragraph_id":"para_45"},{"text":"…","paragraph_id":"para_46"},{"text":"(f)      handle complaints lodged by a data subject, or by a body, organisation or association in accordance with Article 80, and investigate, to the extent appropriate, the subject matter of the complaint and inform the complainant of the progress and the outcome of the investigation within a reasonable period, in particular if further investigation or coordination with another supervisory authority is necessary’.","paragraph_id":"para_47"},{"text":"7         Article 58(2) of the GDPR, entitled ‘Powers’ provides:","paragraph_id":"para_48"},{"text":"‘Each supervisory authority shall have all of the following corrective powers:","paragraph_id":"para_49"},{"text":"(a)      to issue warnings to a controller or processor that intended processing operations are likely to infringe provisions of this Regulation;","paragraph_id":"para_50"},{"text":"(b)      to issue reprimands to a controller or a processor where processing operations have infringed provisions of this Regulation;","paragraph_id":"para_51"},{"text":"(c)      to order the controller or the processor to comply with the data subject’s requests to exercise his or her rights pursuant to this Regulation;","paragraph_id":"para_52"},{"text":"(d)      to order the controller or processor to bring processing operations into compliance with the provisions of this Regulation, where appropriate, in a specified manner and within a specified period;","paragraph_id":"para_53"},{"text":"(e)      to order the controller to communicate a personal data breach to the data subject;","paragraph_id":"para_54"},{"text":"(f)      to impose a temporary or definitive limitation including a ban on processing;","paragraph_id":"para_55"},{"text":"(g)      to order the rectification or erasure of personal data or restriction of processing pursuant to Articles 16, 17 and 18 and the notification of such actions to recipients to whom the personal data have been disclosed pursuant to Article 17(2) and Article 19;","paragraph_id":"para_56"},{"text":"(h)      to withdraw a certification or to order the certification body to withdraw a certification issued pursuant to Articles 42 and 43, or to order the certification body not to issue certification if the requirements for the certification are not or are no longer met;","paragraph_id":"para_57"},{"text":"(i)      to impose an administrative fine pursuant to Article 83, in addition to, or instead of measures referred to in this paragraph, depending on the circumstances of each individual case;","paragraph_id":"para_58"},{"text":"(j)      to order the suspension of data flows to a recipient in a third country or to an international organisation.’","paragraph_id":"para_59"},{"text":"8         Chapter VIII of the GDPR, entitled ‘Remedies, liability and penalties’, comprises Articles 77 to 84 of that regulation.","paragraph_id":"para_60"},{"text":"9         Article 77 of the GDPR, entitled ‘Right to lodge a complaint with a supervisory authority’, provides:","paragraph_id":"para_61"},{"text":"‘1.      Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.","paragraph_id":"para_62"},{"text":"2.      The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78.’","paragraph_id":"para_63"},{"text":"10       Article 78 of the GDPR, entitled ‘Right to an effective judicial remedy against a supervisory authority’, provides, in paragraphs 1 and 2 thereof:","paragraph_id":"para_64"},{"text":"‘1.      Without prejudice to any other administrative or non-judicial remedy, each natural or legal person shall have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning them.","paragraph_id":"para_65"},{"text":"2.      Without prejudice to any other administrative or non-judicial remedy, each data subject shall have the right to [an] effective judicial remedy where the supervisory authority which is competent pursuant to Articles 55 and 56 does not handle a complaint or does not inform the data subject within three months on the progress or outcome of the complaint lodged pursuant to Article 77.’","paragraph_id":"para_66"},{"text":"11       Article 79 of the GDPR, entitled ‘Right to an effective judicial remedy against a controller or processor’, provides:","paragraph_id":"para_67"},{"text":"‘1.      Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation.","paragraph_id":"para_68"},{"text":"2.      Proceedings against a controller or a processor shall be brought before the courts of the Member State where the controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.’","paragraph_id":"para_69"},{"text":"12       Article 81 of the GDPR, entitled ‘Suspension of proceedings’ states, in paragraphs 2 and 3 thereof:","paragraph_id":"para_70"},{"text":"‘2.      Where proceedings concerning the same subject matter as regards processing of the same controller or processor are pending in a court in another Member State, any competent court other than the court first seised may suspend its proceedings.","paragraph_id":"para_71"},{"text":"3.      Where those proceedings are pending at first instance, any court other than the court first seised may also, on the application of one of the parties, decline jurisdiction if the court first seised has jurisdiction over the actions in question and its law permits the consolidation thereof.’","paragraph_id":"para_72"},{"text":"Austrian law","paragraph_id":"para_73"},{"text":"13       Paragraph 94(1) of the Bundes-Verfassungsgesetz (Federal Constitutional Law), republished on 2 January 1930 (BGBl. 1/1930), in its version applicable to the facts of the dispute in the main proceedings provides:","paragraph_id":"para_74"},{"text":"‘The courts are independent of the executive at all levels.","paragraph_id":"para_75"},{"text":"…’","paragraph_id":"para_76"},{"text":"14       Paragraph 24 of Bundesgesetz zum Schutz natürlicher Personen bei der Verarbeitung personenbezogener Daten (Datenschutzgesetz – DSG) (Federal law on the protection of natural persons with regard to the processing of personal data) (Law on Data Protection - DSG), of 17 August 1999 (BGBl. I, 1 …","paragraph_id":"para_77"},{"text":"‘(1)      Every data subject has the right to lodge a complaint with the data protection authority if the data subject considers that the processing of the personal data concerning him or her infringes the GDPR or Paragraph 1 or Article 2, first chapter.","paragraph_id":"para_78"},{"text":"…","paragraph_id":"para_79"},{"text":"(4)      The right to have a complaint dealt with expires if the complainant does not lodge the complaint within a year after having gained knowledge of the incident that gave rise to the complaint, and in any event within at most three years after the incident allegedly occurred. Late complaints shall be rejected. …’","paragraph_id":"para_80"},{"text":"The dispute in the main proceedings and the questions referred for a preliminary ruling","paragraph_id":"para_81"},{"text":"15       On 3 July 2017, Dr. G S, a physician, submitted to Company D, operating a physician search platform enabling third parties to provide reviews and testimonials on physicians, a request for the erasure of certain personal data concerning her, on the basis of the legal situation prior to the entry into force of the GDPR. On 10 July 2017, Company D rejected that request for erasure.","paragraph_id":"para_82"},{"text":"16       Following that refusal, in November 2017, Dr. G S brought an action before a civil court against that company, alleging, inter alia, a breach of the right to the protection of personal data and requesting the erasure of published data concerning her. She also requested that that company be ordered to refrain from any further processing of that data.","paragraph_id":"para_83"},{"text":"17       On 22 June 2018, following the entry into force of the GDPR, Dr. G S made another request for Company D to erase personal data concerning her that was published on the platform operated by that company. That request was also rejected by letter of 6 July 2018.","paragraph_id":"para_84"},{"text":"18       In those circumstances, on 26 July 2018, Dr. G S lodged a complaint with the DSB under Article 77(1) of the GDPR, relying, inter alia, on Article 17 of that regulation, which enshrines the right to erasure. By that complaint, Dr. G S requested the DSB to determine that there had been a brea …","paragraph_id":"para_85"},{"text":"19       By decision of 4 January 2019, the DSB rejected that complaint on the ground that that complaint and the civil action brought in November 2017, as referred to in paragraph 16 of the present judgment, related to the same subject matter, namely the erasure of personal data concerning Dr. G S, as published on that platform.","paragraph_id":"para_86"},{"text":"20       In that regard, the DSB took the view that the parallel or successive conduct of proceedings before a supervisory authority and judicial proceedings would, from a systematic perspective, be inconsistent with the remedial mechanism provided for under the GDPR. In its view, in such a situatio …","paragraph_id":"para_87"},{"text":"21       Dr. G S challenged the DSB’s decision of 4 January 2019 before the Bundesverwaltungsgericht (Federal Administrative Court, Austria), which, by judgment of 4 December 2020, dismissed her action at a time when the judgment delivered by the civil court on 23 July 2020, rejecting Dr. G S’s request, had not yet become final.","paragraph_id":"para_88"},{"text":"22       In that regard, the Bundesverwaltungsgericht (Federal Administrative Court) considered that the GDPR had deliberately established a two-track legal remedy. The latter court recalled that since the GDPR was directly applicable, national provisions which are contrary to it had to be disapplie …","paragraph_id":"para_89"},{"text":"23       In that context, however, the Bundesverwaltungsgericht (Federal Administrative Court) considered that complaint to have been lodged out of time in that it did not comply with the one-year limitation period laid down in Article 24(4) of the Law on Data Protection, in its version applicable t …","paragraph_id":"para_90"},{"text":"24       Both Dr. G S, after the Verfassungsgerichtshof (Constitutional Court, Austria) had declined to deal with her complaint, and the DSB lodged an appeal on a point of law with the Verwaltungsgerichtshof (Supreme Administrative Court, Austria), which is the referring court, against the decision of the Bundesverwaltungsgericht (Federal Administrative Court).","paragraph_id":"para_91"},{"text":"25       The Verwaltungsgerichtshof (Supreme Administrative Court) does not share the assessment of the Bundesverwaltungsgericht (Federal Administrative Court) that Dr. G S’s complaint was lodged out of time. The Verwaltungsgerichtshof (Supreme Administrative Court) nevertheless wishes to examine wh …","paragraph_id":"para_92"},{"text":"26       In that context, that court has doubts as to whether a complaint lodged with the supervisory authority under Article 77(1) of the GDPR may be rejected on the ground that an effective judicial remedy, within the meaning of Article 79 of that regulation and concerning the same subject matter, has previously been sought and that the proceedings relating thereto are still pending before the court seised.","paragraph_id":"para_93"},{"text":"27       In that regard, in order to avoid conflicting decisions, the referring court is inclined to take the view that, on the basis of the mechanism provided for in Article 81(2) and (3) of the GDPR, it could be envisaged that, where a dispute is pending before the civil courts and administrative authorities, the body other than the one first seised is required, on account of the principle of prior adjudication, to reject the request of the person concerned.","paragraph_id":"para_94"},{"text":"28       However, the referring court adds that, in the event of a complaint lodged under Article 77(1) of the GDPR being rejected on the sole ground that judicial proceedings are pending, a substantive decision on the alleged breach of personal data protection will not yet have been made at the time of that rejection, with the result that the risk of contradictory decisions is not yet manifest.","paragraph_id":"para_95"},{"text":"29       Based on the above, the question arises as to whether a distinction must be drawn between a situation in which judicial proceedings are pending and another in which a decision on the substance of the case has already been given, even if it is not yet final.","paragraph_id":"para_96"},{"text":"30       In those circumstances, the Verwaltungsgerichtshof (Supreme Administrative Court) decided to stay the proceedings and refer the following questions to the Court of Justice for a preliminary ruling:","paragraph_id":"para_97"},{"text":"‘(1)      Are Articles 77 and 79 of [the GDPR] to be interpreted, in the light of the findings of the Court in the judgments [of 12 January 2023 in Nemzeti Adatvédelmi és Információszabadság Hatóság (C‑132/21, EU:C:2023:2)], and [of 7 December 2023, SCHUFA Holding (Discharge from remaining debts) , …","paragraph_id":"para_98"},{"text":"(2)      [If the answer to the first question is in the negative, are Articles 77 and 79 of [the GDPR] to be interpreted, in the light of the findings of the Court in the judgments [of 12 January 2023 in Nemzeti Adatvédelmi és Információszabadság Hatóság (C‑132/21, EU:C:2023:2)], and [of 7 December …","paragraph_id":"para_99"},{"text":"The questions referred for a preliminary ruling","paragraph_id":"para_100"},{"text":"31       By its two questions, which it is appropriate to examine together, the referring court asks, in essence, whether Article 77(1) and Article 79(1) of the GDPR must be interpreted as precluding a supervisory authority, with which a complaint has been lodged under Article 77(1) of that regulati …","paragraph_id":"para_101"},{"text":"32       As a preliminary point, it should be borne in mind that, in accordance with settled case-law, in interpreting a provision of EU law it is necessary to consider not only its wording but also its context and the objectives pursued by the legislation of which it forms part (judgment of 12 January 2023, Nemzeti Adatvédelmi és Információszabadság Hatóság , C‑132/21, EU:C:2023:2, paragraph 32).","paragraph_id":"para_102"},{"text":"33       In the first place, it must be pointed out that Articles 77 and 79 fall under Chapter VIII of that regulation, which governs, inter alia, the legal remedies enabling the protection of the data subject’s rights where his or her personal data have been the subject of processing that is allege …","paragraph_id":"para_103"},{"text":"34       In that connection, in so far as concerns the wording of Articles 77 to 79, it should be recalled, first of all, that Article 77(1) of the GDPR provides that, without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a super …","paragraph_id":"para_104"},{"text":"35       The Court has already ruled that those provisions of the GDPR offer different remedies to persons claiming that that regulation has been infringed, it being understood that each of those remedies must be capable of being exercised ‘without prejudice’ to the others (judgment of 12 January 2023, Nemzeti Adatvédelmi és Információszabadság Hatóság , C‑132/21, EU:C:2023:2, paragraph 34).","paragraph_id":"para_105"},{"text":"36       It follows, as the Advocate General observed in point 46 of his Opinion, that the GDPR does not provide for any priority or exclusive competence or jurisdiction nor does it establish any rule of precedence in respect of the assessment carried out by the authority or by the courts referred t …","paragraph_id":"para_106"},{"text":"37       In the second place, as regards the context of those provisions of the GDPR, it should be recalled that, under Article 57(1)(f) of that regulation, each supervisory authority is required on its territory to handle complaints which, in accordance with Article 77(1) of that regulation, any da …","paragraph_id":"para_107"},{"text":"38       In the third place, that contextual interpretation is supported by the objectives pursued by the GDPR. In that regard, it should be noted that the EU legislature’s choice to grant data subjects to whom the processing of personal data relates the possibility of simultaneously and independent …","paragraph_id":"para_108"},{"text":"39       In that context, the Court has already ruled that making several remedies available strengthens the objective set out in recital 141 of the GDPR of guaranteeing for every data subject who considers that his or her rights under that regulation are infringed the right to an effective judicial remedy in accordance with Article 47 of the Charter (judgment of 12 January 2023, Nemzeti Adatvédelmi és Információszabadság Hatóság , C‑132/21, EU:C:2023:2, paragraph 44).","paragraph_id":"para_109"},{"text":"40       The Court has also pointed out that the EU legislature’s decision to leave to data subjects the option to exercise the remedies provided for in Article 77(1) and Article 78(1) of the GDPR, on the one hand, and Article 79(1) thereof, on the other, concurrently with and independently of each …","paragraph_id":"para_110"},{"text":"41       However, in the absence of EU rules governing the matter, it is for each Member State, in accordance with the principle of the procedural autonomy of the Member States, to lay down the detailed rules of administrative and judicial procedures intended to ensure a high level of protection of rights which individuals derive from EU law (judgment of 12 January 2023, Nemzeti Adatvédelmi és Információszabadság Hatóság , C‑132/21, EU:C:2023:2, paragraph 45).","paragraph_id":"para_111"},{"text":"42       Accordingly, it is for the referring court to determine, on the basis of the national procedural provisions, in what manner the remedies provided for by Articles 77 to 79 of the GDPR must be implemented (see, to that effect, judgment of 12 January 2023, Nemzeti Adatvédelmi és Információszabadság Hatóság , C‑132/21, EU:C:2023:2, paragraph 46).","paragraph_id":"para_112"},{"text":"43       In particular, the detailed rules for the implementation of concurrent and independent remedies should not call into question the effectiveness and effective protection of the rights guaranteed by that regulation (judgment of 12 January 2023, Nemzeti Adatvédelmi és Információszabadság Hatóság , C‑132/21, EU:C:2023:2, paragraph 47).","paragraph_id":"para_113"},{"text":"44       In that connection, those detailed rules must not be less favourable than those governing similar domestic actions (principle of equivalence); nor must they render practically impossible or excessively difficult the exercise of rights conferred by EU law (principle of effectiveness) (judgment of 12 January 2023, Nemzeti Adatvédelmi és Információszabadság Hatóság , C‑132/21, EU:C:2023:2, paragraph 48).","paragraph_id":"para_114"},{"text":"45       In that context, the Court pointed out that when the Member States set out detailed procedural rules for legal actions intended to ensure the protection of rights conferred by the GDPR, they must ensure compliance with the right to an effective remedy and to a fair trial, enshrined in Artic …","paragraph_id":"para_115"},{"text":"46       In the present case, it is apparent from the request for a preliminary ruling that the system of remedies provided for by Austrian law precludes courts and administrative authorities from ruling in parallel or successively on the same dispute. In that context, the question arises as to whet …","paragraph_id":"para_116"},{"text":"47       According to the referring court, such a relationship between legal remedies would help to avoid the adoption of contradictory decisions in respect of the same request. However, it observes that, where the DSB rejects a complaint lodged under Article 77(1) of the GDPR on the ground that jud …","paragraph_id":"para_117"},{"text":"48       In that regard, it should be recalled that, as stated in paragraph 37 of the present judgment, under Article 57(1)(f) of the GDPR, each supervisory authority is required on its territory to handle complaints which, in accordance with Article 77(1) of that regulation, any data subject is ent …","paragraph_id":"para_118"},{"text":"49       In the context of that processing, that authority has, as regards the remedies listed in Article 58(2) of the GDPR, a margin of discretion as to the choice of appropriate and necessary means (judgment of 7 December 2023, SCHUFA Holding (Discharge from remaining debts) , C‑26/22 and C‑64/22, EU:C:2023:958, paragraph 68 and the case-law cited).","paragraph_id":"para_119"},{"text":"50       In that regard, the Court has ruled that the complaints procedure, which is not similar to that of a petition, is designed as a mechanism capable of effectively safeguarding the rights and interests of data subjects (judgment of 7 December 2023, SCHUFA Holding (Discharge from remaining debts) , C‑26/22 and C‑64/22, EU:C:2023:958, paragraph 58).","paragraph_id":"para_120"},{"text":"51       Indeed, the supervisory authority is required to take action where the exercise of one or more of the corrective powers provided for in Article 58(2) of the GDPR is appropriate, necessary and proportionate to remedy the shortcoming found and ensure that that regulation is fully enforced (see, to that effect, judgment of 30 April 2025, Inspektorat kam Visshia sadeben savet , C‑313/23, C‑316/23 and C‑332/23, EU:C:2025:303, paragraph 132).","paragraph_id":"para_121"},{"text":"52       It is true that that obligation to intervene requires that, where the supervisory authority receives a complaint under Article 77(1) of the GDPR and is informed of the existence of judicial proceedings brought on the basis of Article 79(1) of that regulation and concerning the same subject matter, it must take due account, in the examination of that complaint, of the decision which will definitively close those proceedings.","paragraph_id":"para_122"},{"text":"53       However, it would be contrary to that obligation to deprive a data subject to whom the processing of personal data relates of the benefit of such a protection mechanism by allowing the supervisory authority to reject his or her complaint on the sole ground that judicial proceedings under Article 79(1) of the GDPR and concerning the same subject matter have already been brought and even though the decision given in those proceedings has not yet become final.","paragraph_id":"para_123"},{"text":"54       In that context, as regards the risk of contradictory decisions being adopted in respect of the same processing of personal data within the same Member State, as the Advocate General observed, in essence, in points 55 and 56 of his Opinion, that Member State could, in a situation such as th …","paragraph_id":"para_124"},{"text":"55       In that regard, it should be noted that the possible suspension of the examination of a complaint lodged under Article 77(1) of that regulation with the supervisory authority pending a judicial decision appears to comply both with the requirement to guarantee the right to an effective judic …","paragraph_id":"para_125"},{"text":"56       By contrast, where the supervisory authority rejects a complaint on the sole ground that judicial proceedings brought on the basis of Article 79(1) of that regulation are pending, first, as mentioned in paragraph 47 of the present judgment, that authority cannot be certain that a decision o …","paragraph_id":"para_126"},{"text":"57       Accordingly, as the Advocate General observed, in essence, in point 57 of his Opinion, the rejection of a complaint lodged with the supervisory authority in a situation such as that of the dispute in the main proceedings would be contrary to the principle of effectiveness, since that arrangement as regards the relationship between those remedies is liable to compromise the effective protection of the rights guaranteed by the GDPR.","paragraph_id":"para_127"},{"text":"58       It follows that it is for the referring court to ascertain whether the provisions of national law in question in the main proceedings are such as to ensure effective protection of the rights guaranteed by the GDPR, in particular as regards the relationship between concurrent and independent remedies available to data subjects to whom the processing of personal data relates.","paragraph_id":"para_128"},{"text":"59       In the light of all the foregoing considerations, the answer to the first and second questions is that Article 77(1) and Article 79(1) of the GDPR must be interpreted as precluding a supervisory authority, with which a complaint has been lodged under Article 77(1) of that regulation, from r …","paragraph_id":"para_129"},{"text":"Costs","paragraph_id":"para_130"},{"text":"60       Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the referring court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.","paragraph_id":"para_131"},{"text":"On those grounds, the Court (First Chamber) hereby rules:","paragraph_id":"para_132"},{"text":"Article 77(1) and Article 79(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)","paragraph_id":"para_133"},{"text":"must be interpreted as precluding a supervisory authority, with which a complaint has been lodged under Article 77(1) of that regulation, from rejecting that complaint on the sole ground that judicial proceedings under Article 79(1) thereof, and concerning the same subject matter, have already been brought and even though the decision given in those proceedings is not yet final.","paragraph_id":"para_134"},{"text":"[Signatures]","paragraph_id":"para_135"},{"text":"*       Language of the case: German.","paragraph_id":"para_136"}],"word_count":6598,"cites":["C-132/21","C-26/22","C-64/22","C-21/23","C-768/21","C-313/23","C-316/23","C-332/23"],"cited_by":[],"sha256":"81a0888243d3d4d174a5b46a90810f00529995d97e2b2ed8979080f40774f4aa","source_url":"https://publications.europa.eu/resource/celex/62024CJ0414","fetched_at":"2026-10-01T14:05:27.633+00:00","canonical":"https://legal.exploreworldai.com/ai/judgments/eu/c-414-24","risk_graph":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-414-24","relations_graph":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-414-24","changes":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes","agent":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-414-24","verification":{"stored_sha256":"81a0888243d3d4d174a5b46a90810f00529995d97e2b2ed8979080f40774f4aa","recomputed_sha256":"81a0888243d3d4d174a5b46a90810f00529995d97e2b2ed8979080f40774f4aa","intact":true,"checked_at":"2026-10-23T22:03:59.382Z"}},"hash":"sha256:7187127f904bb2ae1082df64004ab946bbd2af108dc695cbb02fb65d049a2d22","version":"legal-2026-10-23","expires":"2026-10-24T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-23+legal-2026-10-23+2026-10-23T14:34:08","content_hash":"sha256:7187127f904bb2ae1082df64004ab946bbd2af108dc695cbb02fb65d049a2d22","revalidate_after":"2026-10-23T23:04:00.027Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-414-24","follow":[{"rel":"risk","href":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-414-24"},{"rel":"relations","href":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-414-24"},{"rel":"agent","href":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-414-24"},{"rel":"obligations","href":"https://legal.exploreworldai.com/api/public/v1/obligation-chain"},{"rel":"changes","href":"https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu"}],"disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"access_class":"public","access_view":"public","citation":{"citation_url":"https://legal.exploreworldai.com/eu/praxis/c-414-24","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-5b1ddc04115b0bb05c6ffe79c584bb98","response_hash":"sha256:7187127f904bb2ae1082df64004ab946bbd2af108dc695cbb02fb65d049a2d22"}},"freshness":{"freshness_class":"live","as_of":"2026-11-02T22:29:37.485Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu%3Ac-414-24&verify=1","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":12044}}