{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-422-24","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-422-24)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-12","fingerprint":"ewai:eu:6fc91c","proof":"sha256:271b96d3ff0dce46d386d554a9abf8b861d72bc48a7d7c7c65ca44eb7ae95b70","jurisdiction":"eu","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","item":{"schema_version":"1.0.0","id":"eu:c-422-24","jurisdiction":"eu","lang":"en","brand_source":"Source: NovaCopilot","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"sections":[{"title":"Provisional text","paragraphs":[]},{"title":"JUDGMENT OF THE COURT (First Chamber)","paragraphs":[]},{"title":"18 December 2025 ( * )","paragraphs":["para_4","para_5","para_6"]},{"title":"Integritetsskyddsmyndigheten","paragraphs":["para_8","para_9","para_10","para_11","para_12","para_13","para_14","para_15","para_16","para_17","para_18","para_19","para_20","para_21","para_22"]},{"title":"Judgment","paragraphs":["para_24","para_25"]},{"title":"Legal context","paragraphs":[]},{"title":"3         Recitals 60 and 61 of the GDPR state:","paragraphs":["para_28","para_29","para_30","para_31","para_32","para_33","para_34","para_35","para_36","para_37","para_38","para_39","para_40","para_41","para_42","para_43","para_44","para_45","para_46"]},{"title":"(b)      the contact details of the data protection officer, where applicable;","paragraphs":["para_48","para_49"]},{"title":"(e)      the recipients or categories of recipients of the personal data, if any;","paragraphs":["para_51","para_52","para_53","para_54","para_55"]},{"title":"(d)      the right to lodge a complaint with a supervisory authority;","paragraphs":["para_57","para_58","para_59","para_60","para_61","para_62","para_63"]},{"title":"(b)      the contact details of the data protection officer, where applicable;","paragraphs":["para_65"]},{"title":"(d)      the categories of personal data concerned;","paragraphs":[]},{"title":"(e)      the recipients or categories of recipients of the personal data, if any;","paragraphs":["para_68","para_69","para_70","para_71","para_72","para_73"]},{"title":"(e)      the right to lodge a complaint with a supervisory authority;","paragraphs":["para_75","para_76"]},{"title":"3.      The controller shall provide the information referred to in paragraphs 1 and 2:","paragraphs":["para_78","para_79","para_80","para_81"]},{"title":"5.      Paragraphs 1 to 4 shall not apply where and insofar as:","paragraphs":[]},{"title":"(a)      the data subject already has the information;","paragraphs":["para_84","para_85","para_86"]},{"title":"The dispute in the main proceedings and the question referred for a preliminary ruling","paragraphs":["para_88","para_89","para_90","para_91","para_92","para_93","para_94","para_95","para_96","para_97","para_98","para_99"]},{"title":"The request that the oral part of the procedure be reopened","paragraphs":["para_101","para_102","para_103","para_104","para_105","para_106","para_107","para_108"]},{"title":"Consideration of the question referred","paragraphs":["para_110","para_111","para_112","para_113","para_114","para_115","para_116","para_117","para_118","para_119","para_120","para_121","para_122","para_123","para_124","para_125","para_126","para_127","para_128"]},{"title":"Costs","paragraphs":["para_130"]},{"title":"On those grounds, the Court (First Chamber) hereby rules:","paragraphs":["para_132","para_133","para_134","para_135"]}],"paragraphs":[{"text":"Provisional text","paragraph_id":"para_1"},{"text":"JUDGMENT OF THE COURT (First Chamber)","paragraph_id":"para_2"},{"text":"18 December 2025 ( * )","paragraph_id":"para_3"},{"text":"( Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Articles 13 and 14 – Scope – Personal data collected by means of body cameras worn by ticket inspectors on public transport – Legal basis for the obligation on the data controller to provide information to the data subject )","paragraph_id":"para_4"},{"text":"In Case C‑422/24,","paragraph_id":"para_5"},{"text":"REQUEST for a preliminary ruling under Article 267 TFEU from the Högsta förvaltningsdomstolen (Supreme Administrative Court, Sweden), made by decision of 13 June 2024, received at the Court on 17 June 2024, in the proceedings","paragraph_id":"para_6"},{"text":"Integritetsskyddsmyndigheten","paragraph_id":"para_7"},{"text":"v","paragraph_id":"para_8"},{"text":"AB Storstockholms Lokaltrafik,","paragraph_id":"para_9"},{"text":"THE COURT (First Chamber),","paragraph_id":"para_10"},{"text":"composed of F. Biltgen, President of the Chamber, T. von Danwitz (Rapporteur), Vice-President of the Court, I. Ziemele, A. Kumin and S. Gervasoni, Judges,","paragraph_id":"para_11"},{"text":"Advocate General: L. Medina,","paragraph_id":"para_12"},{"text":"Registrar: A. Calot Escobar,","paragraph_id":"para_13"},{"text":"having regard to the written procedure,","paragraph_id":"para_14"},{"text":"after considering the observations submitted on behalf of:","paragraph_id":"para_15"},{"text":"–        the Integritetsskyddsmyndigheten, by C. Agnehall, A. Persson and D. Törngren, acting as Agents,","paragraph_id":"para_16"},{"text":"–        AB Storstockholms Lokaltrafik, by J. Forzelius, advokat, and G. Tranvik, biträdande jurist,","paragraph_id":"para_17"},{"text":"–        the Danish Government, by D. Elkan, C.A.‑S. Maertens, J. Sandvik Loft and M. Jespersen, acting as Agents,","paragraph_id":"para_18"},{"text":"–        the Austrian Government, by A. Posch, J. Schmoll and C. Gabauer, acting as Agents,","paragraph_id":"para_19"},{"text":"–        the European Commission, by A. Bouchagiar, C. Faroghi and H. Kranenborg, acting as Agents,","paragraph_id":"para_20"},{"text":"after hearing the Opinion of the Advocate General at the sitting on 1 August 2025,","paragraph_id":"para_21"},{"text":"gives the following","paragraph_id":"para_22"},{"text":"Judgment","paragraph_id":"para_23"},{"text":"1         This request for a preliminary ruling concerns the interpretation of Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1; ‘the GDPR’).","paragraph_id":"para_24"},{"text":"2         The request has been made in the context of a dispute between the Integritetsskyddsmyndigheten (Authority for Privacy Protection, Sweden) (‘the Authority’) and AB Storstockholms Lokaltrafik (‘SL’), a Swedish public transport company, concerning an administrative fine imposed on the latter for infringing Article 13 of the GDPR in the context of the collection of personal data by means of body cameras worn by ticket inspectors working for that company.","paragraph_id":"para_25"},{"text":"Legal context","paragraph_id":"para_26"},{"text":"3         Recitals 60 and 61 of the GDPR state:","paragraph_id":"para_27"},{"text":"‘(60)      The principles of fair and transparent processing require that the data subject be informed of the existence of the processing operation and its purposes. The controller should provide the data subject with any further information necessary to ensure fair and transparent processing taking …","paragraph_id":"para_28"},{"text":"(61)      The information in relation to the processing of personal data relating to the data subject should be given to him or her at the time of collection from the data subject, or, where the personal data are obtained from another source, within a reasonable period, depending on the circumstance …","paragraph_id":"para_29"},{"text":"4         Article 5 of the GDPR, entitled ‘Principles relating to processing of personal data’, provides:","paragraph_id":"para_30"},{"text":"‘1.      Personal data shall be:","paragraph_id":"para_31"},{"text":"(a)      processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”);","paragraph_id":"para_32"},{"text":"…","paragraph_id":"para_33"},{"text":"(c)      adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”);","paragraph_id":"para_34"},{"text":"…’","paragraph_id":"para_35"},{"text":"5         Article 12 of the GDPR, entitled ‘Transparent information, communication and modalities for the exercise of the rights of the data subject’, is worded as follows:","paragraph_id":"para_36"},{"text":"‘1.      The controller shall take appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34 relating to processing to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain language … The information shall be provided in writing, or by other means, including, where appropriate, by electronic means. …","paragraph_id":"para_37"},{"text":"…","paragraph_id":"para_38"},{"text":"5.      … Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:","paragraph_id":"para_39"},{"text":"…","paragraph_id":"para_40"},{"text":"(b)      refuse to act on the request.","paragraph_id":"para_41"},{"text":"The controller shall bear the burden of demonstrating the manifestly unfounded or excessive character of the request.","paragraph_id":"para_42"},{"text":"…’","paragraph_id":"para_43"},{"text":"6         Article 13 of the GDPR, headed ‘Information to be provided where personal data are collected from the data subject’, provides:","paragraph_id":"para_44"},{"text":"‘1.      Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information:","paragraph_id":"para_45"},{"text":"(a)      the identity and the contact details of the controller and, where applicable, of the controller’s representative;","paragraph_id":"para_46"},{"text":"(b)      the contact details of the data protection officer, where applicable;","paragraph_id":"para_47"},{"text":"(c)      the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;","paragraph_id":"para_48"},{"text":"(d)      where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party;","paragraph_id":"para_49"},{"text":"(e)      the recipients or categories of recipients of the personal data, if any;","paragraph_id":"para_50"},{"text":"(f)      where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the [European] Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.","paragraph_id":"para_51"},{"text":"2.      In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing:","paragraph_id":"para_52"},{"text":"(a)      the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;","paragraph_id":"para_53"},{"text":"(b)      the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability;","paragraph_id":"para_54"},{"text":"(c)      where the processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;","paragraph_id":"para_55"},{"text":"(d)      the right to lodge a complaint with a supervisory authority;","paragraph_id":"para_56"},{"text":"(e)      whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data;","paragraph_id":"para_57"},{"text":"(f)      the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.","paragraph_id":"para_58"},{"text":"3.      Where the controller intends to further process the personal data for a purpose other than that for which the personal data were collected, the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2.","paragraph_id":"para_59"},{"text":"4.      Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.’","paragraph_id":"para_60"},{"text":"7         Under Article 14 of the GDPR, headed ‘Information to be provided where personal data have not been obtained from the data subject’:","paragraph_id":"para_61"},{"text":"‘1.      Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information:","paragraph_id":"para_62"},{"text":"(a)      the identity and the contact details of the controller and, where applicable, of the controller’s representative;","paragraph_id":"para_63"},{"text":"(b)      the contact details of the data protection officer, where applicable;","paragraph_id":"para_64"},{"text":"(c)      the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;","paragraph_id":"para_65"},{"text":"(d)      the categories of personal data concerned;","paragraph_id":"para_66"},{"text":"(e)      the recipients or categories of recipients of the personal data, if any;","paragraph_id":"para_67"},{"text":"(f)      where applicable, that the controller intends to transfer personal data to a recipient in a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means to obtain a copy of them or where they have been made available.","paragraph_id":"para_68"},{"text":"2.      In addition to the information referred to in paragraph 1, the controller shall provide the data subject with the following information necessary to ensure fair and transparent processing in respect of the data subject:","paragraph_id":"para_69"},{"text":"(a)      the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;","paragraph_id":"para_70"},{"text":"(b)      where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party;","paragraph_id":"para_71"},{"text":"(c)      the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject and to object to processing as well as the right to data portability;","paragraph_id":"para_72"},{"text":"(d)      where processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;","paragraph_id":"para_73"},{"text":"(e)      the right to lodge a complaint with a supervisory authority;","paragraph_id":"para_74"},{"text":"(f)      from which source the personal data originate, and if applicable, whether it came from publicly accessible sources;","paragraph_id":"para_75"},{"text":"(g)      the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.","paragraph_id":"para_76"},{"text":"3.      The controller shall provide the information referred to in paragraphs 1 and 2:","paragraph_id":"para_77"},{"text":"(a)      within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data are processed;","paragraph_id":"para_78"},{"text":"(b)      if the personal data are to be used for communication with the data subject, at the latest at the time of the first communication to that data subject; or","paragraph_id":"para_79"},{"text":"(c)      if a disclosure to another recipient is envisaged, at the latest when the personal data are first disclosed.","paragraph_id":"para_80"},{"text":"4.      Where the controller intends to further process the personal data for a purpose other than that for which the personal data were obtained, the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2.","paragraph_id":"para_81"},{"text":"5.      Paragraphs 1 to 4 shall not apply where and insofar as:","paragraph_id":"para_82"},{"text":"(a)      the data subject already has the information;","paragraph_id":"para_83"},{"text":"(b)      the provision of such information proves impossible or would involve a disproportionate effort, in particular for processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, subject to the conditions and safeguards referred t …","paragraph_id":"para_84"},{"text":"(c)      obtaining or disclosure is expressly laid down by Union or Member State law to which the controller is subject and which provides appropriate measures to protect the data subject’s legitimate interests; or","paragraph_id":"para_85"},{"text":"(d)      where the personal data must remain confidential subject to an obligation of professional secrecy regulated by Union or Member State law, including a statutory obligation of secrecy.’","paragraph_id":"para_86"},{"text":"The dispute in the main proceedings and the question referred for a preliminary ruling","paragraph_id":"para_87"},{"text":"8         SL operates public transport services in Stockholm (Sweden). That company has equipped its ticket inspectors with body cameras, used to film passengers who do not have a valid ticket when ticket inspections are carried out and who are thus issued with a fine. The use of those cameras is intended to prevent and document threats and violence against ticket inspectors and to verify the identity of passengers subject to such a fine.","paragraph_id":"para_88"},{"text":"9         In the course of its supervisory activities, the Authority examined whether SL’s processing of personal data by means of body cameras complied with the rules set out in the GDPR. In June 2021, it adopted a decision from which it is apparent that the ticket inspectors are to wear the cameras throughout their shift and that they are continuously to record video with images and sound.","paragraph_id":"para_89"},{"text":"10       Those cameras have a ‘circular’ memory, which means that, after a certain period of time, all recorded content is automatically overwritten. Once that overwriting process is complete, the recorded material is deleted. Initially, the recorded material was stored for two minutes but, during t …","paragraph_id":"para_90"},{"text":"11       In addition to those findings relating to the use and operation of body cameras, the Authority took the view, in its decision, that SL had, from December 2018 until the date of adoption of that decision in June 2021, processed personal data using body cameras in the course of ticket inspect …","paragraph_id":"para_91"},{"text":"12       The Förvaltningsrätten i Stockholm (Administrative Court, Stockholm, Sweden), before which SL had brought an action against the Authority’s decision, dismissed that action in so far as it concerned the fine imposed on that company for failing to provide information to the data subjects.","paragraph_id":"para_92"},{"text":"13       SL then brought an appeal before the Kammarrätten i Stockholm (Administrative Court of Appeal, Stockholm, Sweden), which set aside the judgment of the court of first instance and annulled the Authority’s decision as regards the imposition of that fine. That court held, referring to the judg …","paragraph_id":"para_93"},{"text":"14       The Authority brought an appeal against the judgment of the Kammarrätten i Stockholm (Administrative Court of Appeal, Stockholm) before the Högsta förvaltningsdomstolen (Supreme Administrative Court, Sweden), which is the referring court, requesting it to set aside that judgment in so far as it concerns the fine imposed on that company for providing inadequate information to the data subjects.","paragraph_id":"para_94"},{"text":"15       The referring court states, first of all, that the question that arises is which of Articles 13 and 14 of the GDPR applies where personal data are collected by means of a body camera. In its view, the answer to that question is necessary in two respects. First, it is necessary to determine …","paragraph_id":"para_95"},{"text":"16       Next, according to the referring court, it is also unclear to what extent the differences between Articles 13 and 14 of the GDPR, as regards the scope of the obligation to provide information contained in those provisions, must be taken into account in determining which of them applies to a particular type of collection of personal data. In that regard, it states that the parties disagree as to the conclusion to be drawn from those differences.","paragraph_id":"para_96"},{"text":"17       Lastly, the referring court is uncertain as to the importance to be attached to the Guidelines on transparency under Regulation 2016/679, adopted on 29 November 2017, in their revised version of 11 April 2018, by the Working Party established by Article 29 of Directive 95/46/EC of the Europ …","paragraph_id":"para_97"},{"text":"18       It is in those circumstances that the Högsta förvaltningsdomstolen (Supreme Administrative Court) decided to stay the proceedings and to refer the following question to the Court for a preliminary ruling:","paragraph_id":"para_98"},{"text":"‘Which of Articles 13 and 14 of the GDPR applies where personal data are [collected] by [means of] a body camera?’","paragraph_id":"para_99"},{"text":"The request that the oral part of the procedure be reopened","paragraph_id":"para_100"},{"text":"19       Following the delivery of the Advocate General’s Opinion on 1 August 2025, SL requested, by document lodged at the Registry of the Court of Justice on 23 September 2025, that the oral part of the procedure be reopened, in accordance with Article 83 of the Rules of Procedure of the Court of Justice.","paragraph_id":"para_101"},{"text":"20       In support of that request, SL argues that the Court was not sufficiently informed about the facts of the main proceedings and about the significance that a decision in that case would have for data controllers making use of video surveillance systems. In particular, it maintains that the Opinion delivered by the Advocate General did not correctly define the respective scopes of Articles 13 and 14 of the GDPR.","paragraph_id":"para_102"},{"text":"21       In that regard, it should be noted that, under the second paragraph of Article 252 TFEU, it is the duty of the Advocate General, acting with complete impartiality and independence, to make, in open court, reasoned submissions on cases which, in accordance with the Statute of the Court of Ju …","paragraph_id":"para_103"},{"text":"22       It should also be noted, in that context, that the Statute of the Court of Justice of the European Union and the Rules of Procedure make no provision for the parties or the interested persons referred to in Article 23 of that statute to submit observations in response to the Advocate Genera …","paragraph_id":"para_104"},{"text":"23       It follows that, in so far as SL’s request that the oral part of the procedure be reopened is intended to enable it to respond to the position expressed by the Advocate General in her Opinion, that request cannot be granted.","paragraph_id":"para_105"},{"text":"24       That being so, under Article 83 of the Rules of Procedure, the Court may at any time, after hearing the Advocate General, order the reopening of the oral part of the procedure, in particular if it considers that it lacks sufficient information, or where a party has, after the close of that …","paragraph_id":"para_106"},{"text":"25       In the present case, however, the Court considers, having heard the Advocate General, that it has all the information necessary to answer the question referred by the referring court and that the present case does not need to be decided on the basis of an argument that has not been debated …","paragraph_id":"para_107"},{"text":"26       In those circumstances, there is no need to order the reopening of the oral part of the procedure.","paragraph_id":"para_108"},{"text":"Consideration of the question referred","paragraph_id":"para_109"},{"text":"27       By its question, the referring court asks, in essence, whether Articles 13 and 14 of the GDPR must be interpreted as meaning that, in a situation in which personal data are collected by means of a body camera worn by ticket inspectors on public transport, the provision of information to the data subjects is governed by Article 13 of the GDPR or by Article 14 thereof.","paragraph_id":"para_110"},{"text":"28       In order to answer that question, it is necessary, in accordance with the Court’s settled case-law, to consider not only the wording of those provisions but also their context and the objectives pursued by the legislation of which they form part (judgment of 28 November 2024, Másdi , C‑169/23, EU:C:2024:988, paragraph 39).","paragraph_id":"para_111"},{"text":"29       As regards, in the first place, the wording of Articles 13 and 14 of the GDPR, it should be noted that the material scope of Article 14 of the GDPR is defined negatively by reference to that of Article 13 of that regulation. As is apparent from those provisions’ headings themselves, Article …","paragraph_id":"para_112"},{"text":"30       For the purposes of distinguishing the respective scopes of those provisions, the fact that, in certain language versions of Article 14 of the GDPR, in particular the Swedish-language version, the term ‘collected’ (‘ samlas in ’) appearing in Article 13 of that regulation is not repeated, is not decisive.","paragraph_id":"para_113"},{"text":"31       It is settled case-law that provisions of EU law must be interpreted and applied uniformly in the light of the versions existing in all the languages of the European Union and, where there is any divergence between those various versions, the provision in question must be interpreted by ref …","paragraph_id":"para_114"},{"text":"32       In that regard, the Court has previously stated, as regards the use of the term ‘obtaining’ (‘ erhållande ’) in Article 14(5)(c) of the GDPR, which, in the Swedish-language version, is also used in the heading of Article 14 and in paragraph 1 thereof (‘ erhållits ’), that that term does in …","paragraph_id":"para_115"},{"text":"33       Furthermore, as the Advocate General observed in point 28 of her Opinion, the term data ‘collected’ from the data subject as referred to in Article 13(1) of the GDPR requires specific action not on the part of the data subject, but solely on the part of the data controller, with the result that the degree of activity of the data subject is irrelevant for the purposes of delimiting the scope of that provision in relation to that of Article 14 of that regulation.","paragraph_id":"para_116"},{"text":"34       That consideration is also highlighted in the Guidelines on transparency, referred to in paragraph 17 of the present judgment, from which it is apparent that Article 13 of the GDPR applies either where the data subject knowingly provides personal data to the controller or where the controller collects the data from that data subject by observation, in particular by means of cameras.","paragraph_id":"para_117"},{"text":"35       In the light of the wording of Article 14(2)(f) of the GDPR, read in the light of recital 61 of that regulation, it must be held that only the source of the personal data collected is the relevant criterion for the purposes of determining the respective scopes of Articles 13 and 14 of the GDPR. Under Article 14(2)(f), where the data have not been obtained from the data subject, the controller must inform the data subject of the source of the personal data.","paragraph_id":"para_118"},{"text":"36       It follows that a literal interpretation of Articles 13 and 14 of the GDPR, read in the light of recital 61 of that regulation, militate in favour of the application of Article 13 to the collection of personal data by means of a body camera, since, in that situation, those data are not obtained from a source other than the data subject, but are obtained directly from that data subject.","paragraph_id":"para_119"},{"text":"37       In the second place, such an interpretation is supported by the context into which those provisions fit.","paragraph_id":"para_120"},{"text":"38       In that regard, it follows from Article 5 of the GDPR that the processing of personal data must, inter alia, satisfy specific requirements of transparency with regard to the data subject concerned by such processing (judgment of 11 July 2024, Meta Platforms Ireland (Representative action) , C‑757/22, EU:C:2024:598, paragraph 53).","paragraph_id":"para_121"},{"text":"39       As the Commission has noted, in essence, in its written observations, by requiring that the information referred to in Article 13 of the GDPR be disclosed to the data subject at the time it is obtained, that article gives specific expression to the right of that person to be informed. By co …","paragraph_id":"para_122"},{"text":"40       In the third place, it is necessary to interpret Articles 13 and 14 of the GDPR in the light of the objective of that regulation, which consists, inter alia, in ensuring a high level of protection of the fundamental rights and freedoms of natural persons, in particular their right to the pr …","paragraph_id":"para_123"},{"text":"41       If it were accepted that Article 14 of the GDPR applies where personal data are collected by means of a body camera, the data subject would not receive any information at the time of collection, even though he or she is the source of those data, which would allow the controller not to provi …","paragraph_id":"para_124"},{"text":"42       That said, it should be noted that that objective does not preclude, as envisaged by European Data Protection Board (EDPB) Guidelines 3/2019 on processing of personal data through video devices, adopted on 29 January 2020, the obligations to provide information under Article 13 of the GDPR …","paragraph_id":"para_125"},{"text":"43       Lastly, it should also be stated, in response to the doubt expressed by the Kammarrätten i Stockholm (Administrative Court of Appeal, Stockholm) as to the scope of paragraph 34 of the judgment of 11 December 2014, Ryneš (C‑212/13, EU:C:2014:2428), referred to in paragraph 13 above, that the …","paragraph_id":"para_126"},{"text":"44       Accordingly, it cannot be inferred from paragraph 34 of that judgment that the Court has previously ruled on the distinction between the scope of Article 13 of the GDPR, on the one hand, and that of Article 14 of that regulation, on the other.","paragraph_id":"para_127"},{"text":"45       In the light of the foregoing considerations, the answer to the question referred is that Articles 13 and 14 of the GDPR must be interpreted as meaning that, in a situation in which personal data are collected by means of a body camera worn by ticket inspectors on public transport, the provision of information to the data subjects is governed by Article 13 of that regulation and not by Article 14 thereof.","paragraph_id":"para_128"},{"text":"Costs","paragraph_id":"para_129"},{"text":"46       Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the referring court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.","paragraph_id":"para_130"},{"text":"On those grounds, the Court (First Chamber) hereby rules:","paragraph_id":"para_131"},{"text":"Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC,","paragraph_id":"para_132"},{"text":"must be interpreted as meaning that in a situation in which personal data are collected by means of a body camera worn by ticket inspectors on public transport, the provision of information to the data subjects is governed by Article 13 of that regulation and not by Article 14 thereof.","paragraph_id":"para_133"},{"text":"[Signatures]","paragraph_id":"para_134"},{"text":"*       Language of the case: Swedish.","paragraph_id":"para_135"}],"word_count":5512,"cites":["C-212/13","C-21/24","C-169/23","C-612/23","C-757/22","C-203/22"],"sha256":"a487c34ca38ed0fec39fa1f87e53755f0cf365392ee3a0e1a3e6c855f4828280","source_url":"https://publications.europa.eu/resource/celex/62024CJ0422","fetched_at":"2026-10-03T05:47:45.189+00:00","canonical":"https://legal.exploreworldai.com/ai/judgments/eu/c-422-24","risk_graph":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-422-24","relations_graph":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-422-24","changes":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes","agent":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-422-24"},"hash":"sha256:271b96d3ff0dce46d386d554a9abf8b861d72bc48a7d7c7c65ca44eb7ae95b70","version":"legal-2026-10-12","expires":"2026-10-13T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-12+legal-2026-10-12+2026-10-12T15:45:29","content_hash":"sha256:271b96d3ff0dce46d386d554a9abf8b861d72bc48a7d7c7c65ca44eb7ae95b70","revalidate_after":"2026-10-12T16:49:17.344Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-422-24","follow":[{"rel":"risk","href":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-422-24"},{"rel":"relations","href":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-422-24"},{"rel":"agent","href":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-422-24"},{"rel":"obligations","href":"https://legal.exploreworldai.com/api/public/v1/obligation-chain"},{"rel":"changes","href":"https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu"}],"disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"withheld":{"item.cited_by":1},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"public","access_view":"public","citation":{"citation_url":"https://legal.exploreworldai.com/eu/praxis/c-422-24","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-625e5a7b154576697e98cec5adc4ed40","response_hash":"sha256:271b96d3ff0dce46d386d554a9abf8b861d72bc48a7d7c7c65ca44eb7ae95b70"}},"freshness":{"freshness_class":"stable","as_of":"2026-11-02T11:17:13.995Z","valid_for":604800,"recheck":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu%3Ac-422-24","note":"Oföränderligt objekt med hash. Får cachas länge.","tokens":11512}}