{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-439-19","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-439-19)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-14","fingerprint":"ewai:eu:f8b9a4","proof":"sha256:55b6c3624be7279f1ea7aa1a7c2ec91d6047d2a20173f23d81318780a14de1fe","jurisdiction":"eu","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","item":{"schema_version":"1.0.0","id":"eu:c-439-19","jurisdiction":"eu","lang":"en","brand_source":"Source: NovaCopilot","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"sections":[{"title":"62019CJ0439","paragraphs":[]},{"title":"JUDGMENT OF THE COURT (Grand Chamber)","paragraphs":[]},{"title":"22 June 2021 (\n *1\n )","paragraphs":["para_4","para_5","para_6"]},{"title":"B","paragraphs":["para_8","para_9","para_10","para_11","para_12","para_13","para_14","para_15","para_16","para_17","para_18","para_19","para_20","para_21","para_22","para_23","para_24","para_25","para_26","para_27","para_28","para_29"]},{"title":"Judgment","paragraphs":[]},{"title":"1","paragraphs":["para_32"]},{"title":"2","paragraphs":["para_34"]},{"title":"Legal context","paragraphs":[]},{"title":"EU law","paragraphs":[]},{"title":"Directive 95/46/EC","paragraphs":[]},{"title":"3","paragraphs":["para_39","para_40"]},{"title":"2.   This Directive shall not apply to the processing of personal data:","paragraphs":["para_42","para_43","para_44"]},{"title":"The GDPR","paragraphs":[]},{"title":"4","paragraphs":[]},{"title":"Recitals 1, 4, 10, 16, 19, 39, 50 and 154 of the GDPR state:","paragraphs":["para_48","para_49","para_50"]},{"title":"(4)","paragraphs":["para_52","para_53"]},{"title":"(10)","paragraphs":["para_55","para_56"]},{"title":"(16)","paragraphs":["para_58","para_59"]},{"title":"(19)","paragraphs":["para_61","para_62"]},{"title":"(39)","paragraphs":["para_64","para_65"]},{"title":"(50)","paragraphs":["para_67","para_68"]},{"title":"(154)","paragraphs":["para_70"]},{"title":"5","paragraphs":[]},{"title":"Article 1 of the GDPR, headed ‘Subject matter and objectives’, provides:","paragraphs":["para_73","para_74","para_75"]},{"title":"6","paragraphs":[]},{"title":"Article 2 of the GDPR, headed ‘Material scope’, provides in paragraphs 1 and 2:","paragraphs":["para_78"]},{"title":"2.   This Regulation does not apply to the processing of personal data:","paragraphs":[]},{"title":"(a)","paragraphs":["para_81"]},{"title":"(b)","paragraphs":["para_83"]},{"title":"(c)","paragraphs":["para_85"]},{"title":"(d)","paragraphs":["para_87"]},{"title":"7","paragraphs":[]},{"title":"As set out in Article 4 of the GDPR, headed ‘Definitions’:","paragraphs":["para_90"]},{"title":"(1)","paragraphs":["para_92"]},{"title":"(2)","paragraphs":["para_94","para_95"]},{"title":"(7)","paragraphs":["para_97","para_98"]},{"title":"8","paragraphs":["para_100","para_101"]},{"title":"(a)","paragraphs":["para_103"]},{"title":"(b)","paragraphs":["para_105"]},{"title":"(c)","paragraphs":["para_107"]},{"title":"(d)","paragraphs":["para_109"]},{"title":"(e)","paragraphs":["para_111"]},{"title":"(f)","paragraphs":["para_113","para_114"]},{"title":"9","paragraphs":[]},{"title":"Article 6 of the GDPR, headed ‘Lawfulness of processing’, provides in paragraph 1:","paragraphs":["para_117"]},{"title":"(a)","paragraphs":["para_119"]},{"title":"(b)","paragraphs":["para_121"]},{"title":"(c)","paragraphs":["para_123"]},{"title":"(d)","paragraphs":["para_125"]},{"title":"(e)","paragraphs":["para_127"]},{"title":"(f)","paragraphs":["para_129","para_130"]},{"title":"10","paragraphs":["para_132","para_133"]},{"title":"11","paragraphs":[]},{"title":"Article 51 of the GDPR, headed ‘Supervisory authority’, states in paragraph 1:","paragraphs":["para_136"]},{"title":"12","paragraphs":["para_138","para_139"]},{"title":"13","paragraphs":["para_141","para_142"]},{"title":"14","paragraphs":["para_144","para_145"]},{"title":"15","paragraphs":[]},{"title":"Article 94 of the GDPR provides:","paragraphs":["para_148","para_149"]},{"title":"Directive 2016/680","paragraphs":[]},{"title":"16","paragraphs":[]},{"title":"Recitals 10, 11 and 13 of Directive 2016/680 state:","paragraphs":["para_153","para_154"]},{"title":"(11)","paragraphs":["para_156","para_157"]},{"title":"(13)","paragraphs":["para_159"]},{"title":"17","paragraphs":[]},{"title":"Article 3 of Directive 2016/680 provides:","paragraphs":["para_162","para_163"]},{"title":"7.   “competent authority” means:","paragraphs":[]},{"title":"(a)","paragraphs":["para_166"]},{"title":"(b)","paragraphs":["para_168","para_169"]},{"title":"Directive 2003/98","paragraphs":[]},{"title":"18","paragraphs":[]},{"title":"Recital 21 of Directive 2003/98 states:","paragraphs":["para_173"]},{"title":"19","paragraphs":[]},{"title":"Article 1 of Directive 2003/98, headed ‘Subject matter and scope’, provides as follows:","paragraphs":["para_176"]},{"title":"2.   This Directive shall not apply to:","paragraphs":["para_178"]},{"title":"(cc)","paragraphs":["para_180","para_181","para_182","para_183","para_184"]},{"title":"Latvian law","paragraphs":[]},{"title":"20","paragraphs":["para_187","para_188"]},{"title":"21","paragraphs":["para_190"]},{"title":"22","paragraphs":["para_192"]},{"title":"23","paragraphs":["para_194"]},{"title":"24","paragraphs":["para_196"]},{"title":"25","paragraphs":["para_198","para_199"]},{"title":"26","paragraphs":["para_201","para_202"]},{"title":"27","paragraphs":["para_204"]},{"title":"28","paragraphs":["para_206"]},{"title":"29","paragraphs":["para_208"]},{"title":"30","paragraphs":["para_210"]},{"title":"The dispute in the main proceedings and the questions referred for a preliminary ruling","paragraphs":[]},{"title":"31","paragraphs":["para_213"]},{"title":"32","paragraphs":["para_215"]},{"title":"33","paragraphs":["para_217"]},{"title":"34","paragraphs":["para_219"]},{"title":"35","paragraphs":["para_221"]},{"title":"36","paragraphs":["para_223"]},{"title":"37","paragraphs":["para_225"]},{"title":"38","paragraphs":["para_227"]},{"title":"39","paragraphs":["para_229"]},{"title":"40","paragraphs":["para_231"]},{"title":"41","paragraphs":["para_233"]},{"title":"42","paragraphs":["para_235"]},{"title":"43","paragraphs":["para_237"]},{"title":"44","paragraphs":["para_239"]},{"title":"45","paragraphs":["para_241"]},{"title":"46","paragraphs":["para_243"]},{"title":"47","paragraphs":["para_245"]},{"title":"48","paragraphs":["para_247"]},{"title":"49","paragraphs":["para_249"]},{"title":"50","paragraphs":["para_251"]},{"title":"51","paragraphs":["para_253"]},{"title":"52","paragraphs":["para_255"]},{"title":"53","paragraphs":["para_257","para_258","para_259"]},{"title":"(2)","paragraphs":["para_261"]},{"title":"(3)","paragraphs":["para_263"]},{"title":"(4)","paragraphs":["para_265"]},{"title":"Consideration of the questions referred","paragraphs":[]},{"title":"First question","paragraphs":[]},{"title":"54","paragraphs":["para_269"]},{"title":"55","paragraphs":["para_271"]},{"title":"56","paragraphs":["para_273"]},{"title":"57","paragraphs":["para_275"]},{"title":"58","paragraphs":["para_277"]},{"title":"59","paragraphs":["para_279"]},{"title":"60","paragraphs":["para_281"]},{"title":"61","paragraphs":["para_283"]},{"title":"62","paragraphs":["para_285"]},{"title":"63","paragraphs":["para_287"]},{"title":"64","paragraphs":["para_289"]},{"title":"65","paragraphs":["para_291"]},{"title":"66","paragraphs":["para_293"]},{"title":"67","paragraphs":["para_295"]},{"title":"68","paragraphs":["para_297"]},{"title":"69","paragraphs":["para_299"]},{"title":"70","paragraphs":["para_301"]},{"title":"71","paragraphs":["para_303"]},{"title":"72","paragraphs":["para_305"]},{"title":"73","paragraphs":["para_307"]},{"title":"74","paragraphs":["para_309"]},{"title":"75","paragraphs":["para_311"]},{"title":"76","paragraphs":["para_313"]},{"title":"77","paragraphs":["para_315"]},{"title":"78","paragraphs":["para_317"]},{"title":"79","paragraphs":["para_319"]},{"title":"80","paragraphs":["para_321"]},{"title":"81","paragraphs":["para_323"]},{"title":"82","paragraphs":["para_325"]},{"title":"83","paragraphs":["para_327"]},{"title":"84","paragraphs":["para_329"]},{"title":"85","paragraphs":["para_331"]},{"title":"86","paragraphs":["para_333"]},{"title":"87","paragraphs":["para_335"]},{"title":"88","paragraphs":["para_337"]},{"title":"89","paragraphs":["para_339"]},{"title":"90","paragraphs":["para_341"]},{"title":"91","paragraphs":["para_343"]},{"title":"92","paragraphs":["para_345"]},{"title":"93","paragraphs":["para_347"]},{"title":"94","paragraphs":["para_349"]},{"title":"Second question","paragraphs":[]},{"title":"95","paragraphs":["para_352"]},{"title":"96","paragraphs":["para_354"]},{"title":"97","paragraphs":["para_356"]},{"title":"98","paragraphs":["para_358"]},{"title":"99","paragraphs":["para_360"]},{"title":"100","paragraphs":["para_362"]},{"title":"101","paragraphs":["para_364"]},{"title":"102","paragraphs":["para_366"]},{"title":"103","paragraphs":["para_368"]},{"title":"104","paragraphs":["para_370"]},{"title":"105","paragraphs":["para_372"]},{"title":"106","paragraphs":["para_374"]},{"title":"107","paragraphs":["para_376"]},{"title":"108","paragraphs":["para_378"]},{"title":"109","paragraphs":["para_380"]},{"title":"110","paragraphs":["para_382"]},{"title":"111","paragraphs":["para_384"]},{"title":"112","paragraphs":["para_386"]},{"title":"113","paragraphs":["para_388"]},{"title":"114","paragraphs":["para_390"]},{"title":"115","paragraphs":["para_392"]},{"title":"116","paragraphs":["para_394"]},{"title":"117","paragraphs":["para_396"]},{"title":"118","paragraphs":["para_398"]},{"title":"119","paragraphs":["para_400"]},{"title":"120","paragraphs":["para_402"]},{"title":"121","paragraphs":["para_404"]},{"title":"122","paragraphs":["para_406"]},{"title":"Third question","paragraphs":[]},{"title":"123","paragraphs":["para_409"]},{"title":"124","paragraphs":["para_411"]},{"title":"125","paragraphs":["para_413"]},{"title":"126","paragraphs":["para_415"]},{"title":"127","paragraphs":["para_417"]},{"title":"128","paragraphs":["para_419"]},{"title":"129","paragraphs":["para_421"]},{"title":"Fourth question","paragraphs":[]},{"title":"130","paragraphs":["para_424"]},{"title":"131","paragraphs":["para_426"]},{"title":"132","paragraphs":["para_428"]},{"title":"133","paragraphs":["para_430"]},{"title":"134","paragraphs":["para_432"]},{"title":"135","paragraphs":["para_434"]},{"title":"136","paragraphs":["para_436"]},{"title":"137","paragraphs":["para_438"]},{"title":"Costs","paragraphs":[]},{"title":"138","paragraphs":["para_441"]},{"title":"On those grounds, the Court (Grand Chamber) hereby rules:","paragraphs":["para_443","para_444","para_445","para_446","para_447","para_448","para_449","para_450","para_451","para_452"]}],"paragraphs":[{"text":"62019CJ0439","paragraph_id":"para_1"},{"text":"JUDGMENT OF THE COURT (Grand Chamber)","paragraph_id":"para_2"},{"text":"22 June 2021 (\n *1\n )","paragraph_id":"para_3"},{"text":"(Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Articles 5, 6 and 10 – National legislation providing for public access to personal data relating to penalty points imposed for road traffic offences – Lawf …","paragraph_id":"para_4"},{"text":"In Case C‑439/19,","paragraph_id":"para_5"},{"text":"REQUEST for a preliminary ruling under Article 267 TFEU from the Latvijas Republikas Satversmes tiesa (Constitutional Court, Latvia), made by decision of 4 June 2019, received at the Court on 11 June 2019, in the proceedings brought by","paragraph_id":"para_6"},{"text":"B","paragraph_id":"para_7"},{"text":"other party:","paragraph_id":"para_8"},{"text":"Latvijas Republikas Saeima,","paragraph_id":"para_9"},{"text":"THE COURT (Grand Chamber),","paragraph_id":"para_10"},{"text":"composed of K. Lenaerts, President, R. Silva de Lapuerta, Vice-President, J.‑C. Bonichot, A. Arabadjiev, E. Regan, M. Ilešič (Rapporteur) and N. Piçarra, Presidents of Chambers, E. Juhász, M. Safjan, D. Šváby, S. Rodin, F. Biltgen, K. Jürimäe, C. Lycourgos and P.G. Xuereb, Judges,","paragraph_id":"para_11"},{"text":"Advocate General: M. Szpunar,","paragraph_id":"para_12"},{"text":"Registrar: A. Calot Escobar,","paragraph_id":"para_13"},{"text":"having regard to the written procedure,","paragraph_id":"para_14"},{"text":"after considering the observations submitted on behalf of:","paragraph_id":"para_15"},{"text":"–","paragraph_id":"para_16"},{"text":"the Latvian Government, initially by V. Soņeca and K. Pommere, and subsequently by K. Pommere, acting as Agents,","paragraph_id":"para_17"},{"text":"–","paragraph_id":"para_18"},{"text":"the Netherlands Government, by M.K. Bulterman and M. Noort, acting as Agents,","paragraph_id":"para_19"},{"text":"–","paragraph_id":"para_20"},{"text":"the Austrian Government, by J. Schmoll and G. Kunnert, acting as Agents,","paragraph_id":"para_21"},{"text":"–","paragraph_id":"para_22"},{"text":"the Portuguese Government, by L. Inez Fernandes, P. Barros da Costa, A.C. Guerra and I. Oliveira, acting as Agents,","paragraph_id":"para_23"},{"text":"–","paragraph_id":"para_24"},{"text":"the Swedish Government, by C. Meyer-Seitz, H. Shev, H. Eklinder, R. Shahsavan Eriksson, A. Runeskjöld, M. Salborn Hodgson, O. Simonsson and J. Lundberg acting as Agents,","paragraph_id":"para_25"},{"text":"–","paragraph_id":"para_26"},{"text":"the European Commission, by D. Nardi, H. Kranenborg and I. Rubene, acting as Agents,","paragraph_id":"para_27"},{"text":"after hearing the Opinion of the Advocate General at the sitting on 17 December 2020,","paragraph_id":"para_28"},{"text":"gives the following","paragraph_id":"para_29"},{"text":"Judgment","paragraph_id":"para_30"},{"text":"1","paragraph_id":"para_31"},{"text":"This request for a preliminary ruling concerns the interpretation of Articles 5, 6 and 10 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such da …","paragraph_id":"para_32"},{"text":"2","paragraph_id":"para_33"},{"text":"The request has been made in proceedings brought by B concerning the legality of national legislation providing for public access to personal data relating to penalty points imposed for road traffic offences.","paragraph_id":"para_34"},{"text":"Legal context","paragraph_id":"para_35"},{"text":"EU law","paragraph_id":"para_36"},{"text":"Directive 95/46/EC","paragraph_id":"para_37"},{"text":"3","paragraph_id":"para_38"},{"text":"Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ( OJ 1995 L 281, p. 31 ) was repealed by the GDPR, with effect from 25 May 2018. Article 3 of that directive, headed ‘Scope’, was worded as follows:","paragraph_id":"para_39"},{"text":"‘1.   This Directive shall apply to the processing of personal data wholly or partly by automatic means, and to the processing otherwise than by automatic means of personal data which form part of a filing system or are intended to form part of a filing system.","paragraph_id":"para_40"},{"text":"2.   This Directive shall not apply to the processing of personal data:","paragraph_id":"para_41"},{"text":"–","paragraph_id":"para_42"},{"text":"in the course of an activity which falls outside the scope of Community law, such as those provided for by Titles V and VI of the [EU Treaty, in the version in force prior to the Treaty of Lisbon,] and in any case to processing operations concerning public security, defence, State security (including the economic well-being of the State when the processing operation relates to State security matters) and the activities of the State in areas of criminal law,","paragraph_id":"para_43"},{"text":"…’","paragraph_id":"para_44"},{"text":"The GDPR","paragraph_id":"para_45"},{"text":"4","paragraph_id":"para_46"},{"text":"Recitals 1, 4, 10, 16, 19, 39, 50 and 154 of the GDPR state:","paragraph_id":"para_47"},{"text":"‘(1)","paragraph_id":"para_48"},{"text":"The protection of natural persons in relation to the processing of personal data is a fundamental right. Article 8(1) of the Charter of Fundamental Rights of the European Union (the “Charter”) and Article 16(1) [TFEU] provide that everyone has the right to the protection of personal data concerning him or her.","paragraph_id":"para_49"},{"text":"…","paragraph_id":"para_50"},{"text":"(4)","paragraph_id":"para_51"},{"text":"The processing of personal data should be designed to serve mankind. The right to the protection of personal data is not an absolute right; it must be considered in relation to its function in society and be balanced against other fundamental rights, in accordance with the principle of proportionali …","paragraph_id":"para_52"},{"text":"…","paragraph_id":"para_53"},{"text":"(10)","paragraph_id":"para_54"},{"text":"In order to ensure a consistent and high level of protection of natural persons and to remove the obstacles to flows of personal data within the Union, the level of protection of the rights and freedoms of natural persons with regard to the processing of such data should be equivalent in all Member …","paragraph_id":"para_55"},{"text":"…","paragraph_id":"para_56"},{"text":"(16)","paragraph_id":"para_57"},{"text":"This Regulation does not apply to issues of protection of fundamental rights and freedoms or the free flow of personal data related to activities which fall outside the scope of Union law, such as activities concerning national security. This Regulation does not apply to the processing of personal data by the Member States when carrying out activities in relation to the common foreign and security policy of the Union.","paragraph_id":"para_58"},{"text":"…","paragraph_id":"para_59"},{"text":"(19)","paragraph_id":"para_60"},{"text":"The protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of …","paragraph_id":"para_61"},{"text":"…","paragraph_id":"para_62"},{"text":"(39)","paragraph_id":"para_63"},{"text":"… In particular, the specific purposes for which personal data are processed should be explicit and legitimate and determined at the time of the collection of the personal data. … Personal data should be processed only if the purpose of the processing could not reasonably be fulfilled by other means. …","paragraph_id":"para_64"},{"text":"…","paragraph_id":"para_65"},{"text":"(50)","paragraph_id":"para_66"},{"text":"The processing of personal data for purposes other than those for which the personal data were initially collected should be allowed only where the processing is compatible with the purposes for which the personal data were initially collected. In such a case, no legal basis separate from that which …","paragraph_id":"para_67"},{"text":"…","paragraph_id":"para_68"},{"text":"(154)","paragraph_id":"para_69"},{"text":"This Regulation allows the principle of public access to official documents to be taken into account when applying this Regulation. Public access to official documents may be considered to be in the public interest. Personal data in documents held by a public authority or a public body should be abl …","paragraph_id":"para_70"},{"text":"5","paragraph_id":"para_71"},{"text":"Article 1 of the GDPR, headed ‘Subject matter and objectives’, provides:","paragraph_id":"para_72"},{"text":"‘1.   This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data.","paragraph_id":"para_73"},{"text":"2.   This Regulation protects fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data.","paragraph_id":"para_74"},{"text":"3.   The free movement of personal data within the Union shall be neither restricted nor prohibited for reasons connected with the protection of natural persons with regard to the processing of personal data.’","paragraph_id":"para_75"},{"text":"6","paragraph_id":"para_76"},{"text":"Article 2 of the GDPR, headed ‘Material scope’, provides in paragraphs 1 and 2:","paragraph_id":"para_77"},{"text":"‘1.   This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system.","paragraph_id":"para_78"},{"text":"2.   This Regulation does not apply to the processing of personal data:","paragraph_id":"para_79"},{"text":"(a)","paragraph_id":"para_80"},{"text":"in the course of an activity which falls outside the scope of Union law;","paragraph_id":"para_81"},{"text":"(b)","paragraph_id":"para_82"},{"text":"by the Member States when carrying out activities which fall within the scope of Chapter 2 of Title V of the TEU;","paragraph_id":"para_83"},{"text":"(c)","paragraph_id":"para_84"},{"text":"by a natural person in the course of a purely personal or household activity;","paragraph_id":"para_85"},{"text":"(d)","paragraph_id":"para_86"},{"text":"by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.’","paragraph_id":"para_87"},{"text":"7","paragraph_id":"para_88"},{"text":"As set out in Article 4 of the GDPR, headed ‘Definitions’:","paragraph_id":"para_89"},{"text":"‘For the purposes of this Regulation:","paragraph_id":"para_90"},{"text":"(1)","paragraph_id":"para_91"},{"text":"“personal data” means any information relating to an identified or identifiable natural person …;","paragraph_id":"para_92"},{"text":"(2)","paragraph_id":"para_93"},{"text":"“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;","paragraph_id":"para_94"},{"text":"…","paragraph_id":"para_95"},{"text":"(7)","paragraph_id":"para_96"},{"text":"“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;","paragraph_id":"para_97"},{"text":"…’","paragraph_id":"para_98"},{"text":"8","paragraph_id":"para_99"},{"text":"Article 5 of the GDPR, headed ‘Principles relating to processing of personal data’, states:","paragraph_id":"para_100"},{"text":"‘1.   Personal data shall be:","paragraph_id":"para_101"},{"text":"(a)","paragraph_id":"para_102"},{"text":"processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”);","paragraph_id":"para_103"},{"text":"(b)","paragraph_id":"para_104"},{"text":"collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; … (“purpose limitation”);","paragraph_id":"para_105"},{"text":"(c)","paragraph_id":"para_106"},{"text":"adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”);","paragraph_id":"para_107"},{"text":"(d)","paragraph_id":"para_108"},{"text":"accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (“accuracy”);","paragraph_id":"para_109"},{"text":"(e)","paragraph_id":"para_110"},{"text":"kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; … (“storage limitation”);","paragraph_id":"para_111"},{"text":"(f)","paragraph_id":"para_112"},{"text":"processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (“integrity and confidentiality”).","paragraph_id":"para_113"},{"text":"2.   The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (“accountability”).’","paragraph_id":"para_114"},{"text":"9","paragraph_id":"para_115"},{"text":"Article 6 of the GDPR, headed ‘Lawfulness of processing’, provides in paragraph 1:","paragraph_id":"para_116"},{"text":"‘Processing shall be lawful only if and to the extent that at least one of the following applies:","paragraph_id":"para_117"},{"text":"(a)","paragraph_id":"para_118"},{"text":"the data subject has given consent to the processing of his or her personal data for one or more specific purposes;","paragraph_id":"para_119"},{"text":"(b)","paragraph_id":"para_120"},{"text":"processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;","paragraph_id":"para_121"},{"text":"(c)","paragraph_id":"para_122"},{"text":"processing is necessary for compliance with a legal obligation to which the controller is subject;","paragraph_id":"para_123"},{"text":"(d)","paragraph_id":"para_124"},{"text":"processing is necessary in order to protect the vital interests of the data subject or of another natural person;","paragraph_id":"para_125"},{"text":"(e)","paragraph_id":"para_126"},{"text":"processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;","paragraph_id":"para_127"},{"text":"(f)","paragraph_id":"para_128"},{"text":"processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.","paragraph_id":"para_129"},{"text":"Point (f) of the first subparagraph shall not apply to processing carried out by public authorities in the performance of their tasks.’","paragraph_id":"para_130"},{"text":"10","paragraph_id":"para_131"},{"text":"Article 10 of the GDPR, headed ‘Processing of personal data relating to criminal convictions and offences’, provides:","paragraph_id":"para_132"},{"text":"‘Processing of personal data relating to criminal convictions and offences or related security measures based on Article 6(1) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the control of official authority.’","paragraph_id":"para_133"},{"text":"11","paragraph_id":"para_134"},{"text":"Article 51 of the GDPR, headed ‘Supervisory authority’, states in paragraph 1:","paragraph_id":"para_135"},{"text":"‘Each Member State shall provide for one or more independent public authorities to be responsible for monitoring the application of this Regulation, in order to protect the fundamental rights and freedoms of natural persons in relation to processing and to facilitate the free flow of personal data within the Union (“supervisory authority”).’","paragraph_id":"para_136"},{"text":"12","paragraph_id":"para_137"},{"text":"Article 85 of the GDPR, headed ‘Processing and freedom of expression and information’, provides in paragraph 1:","paragraph_id":"para_138"},{"text":"‘Member States shall by law reconcile the right to the protection of personal data pursuant to this Regulation with the right to freedom of expression and information, including processing for journalistic purposes and the purposes of academic, artistic or literary expression.’","paragraph_id":"para_139"},{"text":"13","paragraph_id":"para_140"},{"text":"Article 86 of the GDPR, headed ‘Processing and public access to official documents’, provides:","paragraph_id":"para_141"},{"text":"‘Personal data in official documents held by a public authority or a public body or a private body for the performance of a task carried out in the public interest may be disclosed by the authority or body in accordance with Union or Member State law to which the public authority or body is subject in order to reconcile public access to official documents with the right to the protection of personal data pursuant to this Regulation.’","paragraph_id":"para_142"},{"text":"14","paragraph_id":"para_143"},{"text":"As set out in Article 87 of the GDPR, headed ‘Processing of the national identification number’:","paragraph_id":"para_144"},{"text":"‘Member States may further determine the specific conditions for the processing of a national identification number or any other identifier of general application. In that case the national identification number or any other identifier of general application shall be used only under appropriate safeguards for the rights and freedoms of the data subject pursuant to this Regulation.’","paragraph_id":"para_145"},{"text":"15","paragraph_id":"para_146"},{"text":"Article 94 of the GDPR provides:","paragraph_id":"para_147"},{"text":"‘1.   Directive [95/46] is repealed with effect from 25 May 2018.","paragraph_id":"para_148"},{"text":"2.   References to the repealed Directive shall be construed as references to this Regulation. …’","paragraph_id":"para_149"},{"text":"Directive 2016/680","paragraph_id":"para_150"},{"text":"16","paragraph_id":"para_151"},{"text":"Recitals 10, 11 and 13 of Directive 2016/680 state:","paragraph_id":"para_152"},{"text":"‘(10)","paragraph_id":"para_153"},{"text":"In Declaration No 21 on the protection of personal data in the fields of judicial cooperation in criminal matters and police cooperation, annexed to the final act of the intergovernmental conference which adopted the Treaty of Lisbon, the conference acknowledged that specific rules on the protection …","paragraph_id":"para_154"},{"text":"(11)","paragraph_id":"para_155"},{"text":"It is therefore appropriate for those fields to be addressed by a directive that lays down the specific rules relating to the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecut …","paragraph_id":"para_156"},{"text":"…","paragraph_id":"para_157"},{"text":"(13)","paragraph_id":"para_158"},{"text":"A criminal offence within the meaning of this Directive should be an autonomous concept of Union law as interpreted by the Court of Justice of the European Union …’","paragraph_id":"para_159"},{"text":"17","paragraph_id":"para_160"},{"text":"Article 3 of Directive 2016/680 provides:","paragraph_id":"para_161"},{"text":"‘For the purposes of this Directive:","paragraph_id":"para_162"},{"text":"…","paragraph_id":"para_163"},{"text":"7.   “competent authority” means:","paragraph_id":"para_164"},{"text":"(a)","paragraph_id":"para_165"},{"text":"any public authority competent for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security; or","paragraph_id":"para_166"},{"text":"(b)","paragraph_id":"para_167"},{"text":"any other body or entity entrusted by Member State law to exercise public authority and public powers for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security;","paragraph_id":"para_168"},{"text":"…’","paragraph_id":"para_169"},{"text":"Directive 2003/98","paragraph_id":"para_170"},{"text":"18","paragraph_id":"para_171"},{"text":"Recital 21 of Directive 2003/98 states:","paragraph_id":"para_172"},{"text":"‘This Directive should be implemented and applied in full compliance with the principles relating to the protection of personal data in accordance with Directive [95/46].’","paragraph_id":"para_173"},{"text":"19","paragraph_id":"para_174"},{"text":"Article 1 of Directive 2003/98, headed ‘Subject matter and scope’, provides as follows:","paragraph_id":"para_175"},{"text":"‘1.   This Directive establishes a minimum set of rules governing the re-use and the practical means of facilitating re-use of existing documents held by public sector bodies of the Member States.","paragraph_id":"para_176"},{"text":"2.   This Directive shall not apply to:","paragraph_id":"para_177"},{"text":"…","paragraph_id":"para_178"},{"text":"(cc)","paragraph_id":"para_179"},{"text":"documents access to which is excluded or restricted by virtue of the access regimes on the grounds of protection of personal data, and parts of documents accessible by virtue of those regimes which contain personal data the re-use of which has been defined by law as being incompatible with the law concerning the protection of individuals with regard to the processing of personal data;","paragraph_id":"para_180"},{"text":"…","paragraph_id":"para_181"},{"text":"3.   This Directive builds on and is without prejudice to access regimes in the Member States.","paragraph_id":"para_182"},{"text":"4.   This Directive leaves intact and in no way affects the level of protection of individuals with regard to the processing of personal data under the provisions of Union and national law, and in particular does not alter the obligations and rights set out in Directive [95/46].","paragraph_id":"para_183"},{"text":"…’","paragraph_id":"para_184"},{"text":"Latvian law","paragraph_id":"para_185"},{"text":"20","paragraph_id":"para_186"},{"text":"Article 96 of the Latvijas Republikas Satversme (Constitution of the Republic of Latvia; ‘the Latvian Constitution’) provides:","paragraph_id":"para_187"},{"text":"‘Everyone has the right to respect for his or her private life, home and correspondence.’","paragraph_id":"para_188"},{"text":"21","paragraph_id":"para_189"},{"text":"Under Article 1(5) of the Informācijas atklātības likums (Law on freedom of information) of 29 October 1998 ( Latvijas Vēstnesis , 1998, No 334/335), re-use consists in the use of publicly accessible information, held and created by an authority, for commercial or non-commercial purposes other than the initial purpose for which the information was created, if that use is by a private party and does not involve tasks in the exercise of public authority.","paragraph_id":"para_190"},{"text":"22","paragraph_id":"para_191"},{"text":"Under Article 4 of that law, publicly accessible information is information that does not fall within the category of information subject to restricted access.","paragraph_id":"para_192"},{"text":"23","paragraph_id":"para_193"},{"text":"Article 5(1) of that law provides that information is subject to restricted access where it is intended for a restricted group of persons for the purpose of the performance of their tasks or professional duties and the disclosure or loss thereof, on account of its nature and content, hinders or may …","paragraph_id":"para_194"},{"text":"24","paragraph_id":"para_195"},{"text":"In accordance with Article 10(3) of the Law on freedom of information, publicly accessible information may be provided upon request. The applicant is not required to justify specifically his or her interest in obtaining the information, and may not be refused access on the ground that the information does not concern him or her.","paragraph_id":"para_196"},{"text":"25","paragraph_id":"para_197"},{"text":"Article 14 1 of the Ceļu satiksmes likums (Law on road traffic) of 1 October 1997 ( Latvijas Vēstnesis , 1997, No 274/276), in the version applicable at the material time (‘the Law on road traffic’), headed ‘Access to information kept in the national register of vehicles and their drivers …’, states in paragraph 2:","paragraph_id":"para_198"},{"text":"‘Information relating … to a person’s right to drive vehicles, to fines for the commission of road traffic offences which have been imposed on a person but not paid within the time limits laid down by law and other information recorded in the national register of vehicles and their drivers … shall be regarded as information in the public domain.’","paragraph_id":"para_199"},{"text":"26","paragraph_id":"para_200"},{"text":"Article 43 1 of the Law on road traffic, headed ‘Penalty points system’, provides in paragraph 1:","paragraph_id":"para_201"},{"text":"‘In order to influence the behaviour of drivers of vehicles, by promoting safe driving and compliance with road traffic rules, and in order to reduce as far as possible the risks for human life, human health and a person’s property, administrative offences committed by drivers of vehicles shall be entered in the register of convictions and penalty points shall be entered in the national register of vehicles and their drivers.’","paragraph_id":"para_202"},{"text":"27","paragraph_id":"para_203"},{"text":"In accordance with paragraphs 1 and 4 of Ministru kabineta noteikumi Nr. 551 ‘Pārkāpumu uzskaites punktu sistēmas piemērošanas noteikumi’ (Cabinet Regulation No 551 on the rules for application of the penalty points system) of 21 June 2004 ( Latvijas Vēstnesis , 2004, No 102), penalty points for adm …","paragraph_id":"para_204"},{"text":"28","paragraph_id":"para_205"},{"text":"Under paragraph 7 of that regulation, penalty points are removed when they have expired.","paragraph_id":"para_206"},{"text":"29","paragraph_id":"para_207"},{"text":"By virtue of paragraph 12 of that regulation, depending on the number of penalty points, drivers are subject to measures such as warnings, road safety training or tests, or a driving ban for a specified period.","paragraph_id":"para_208"},{"text":"30","paragraph_id":"para_209"},{"text":"As is apparent from Article 32(1) of the Satversmes tiesas likums (Law on the Constitutional Court) of 5 June 1996 ( Latvijas Vēstnesis , 1996, No 103), a judgment of the Latvijas Republikas Satversmes tiesa (Constitutional Court, Latvia) is final and enforceable when it is delivered. In accordance …","paragraph_id":"para_210"},{"text":"The dispute in the main proceedings and the questions referred for a preliminary ruling","paragraph_id":"para_211"},{"text":"31","paragraph_id":"para_212"},{"text":"B is a natural person upon whom penalty points were imposed on account of one or more road traffic offences. In accordance with the Law on road traffic and Regulation No 551 of 21 June 2004, the Ceļu satiksmes drošības direkcija (Road Safety Directorate, Latvia) (‘the CSDD’) entered those penalty points in the national register of vehicles and their drivers.","paragraph_id":"para_213"},{"text":"32","paragraph_id":"para_214"},{"text":"Since the information relating to those penalty points that was contained in the register was accessible to the public and moreover, according to B, had been disclosed, for purposes of re-use, to a number of economic operators, B lodged a constitutional complaint with the Latvijas Republikas Satvers …","paragraph_id":"para_215"},{"text":"33","paragraph_id":"para_216"},{"text":"The Latvijas Republikas Saeima (Parliament of the Republic of Latvia; ‘the Latvian Parliament’) was involved in the proceedings as the institution which had adopted the Law on road traffic. In addition, the CSDD, which processes the data relating to penalty points imposed for road traffic offences, …","paragraph_id":"para_217"},{"text":"34","paragraph_id":"para_218"},{"text":"In the context of the main proceedings, the Latvian Parliament confirmed that, under Article 14 1 (2) of the Law on road traffic, any person may obtain information relating to penalty points imposed on another person, either by enquiring directly at the CSDD or by using the services provided by commercial re-users.","paragraph_id":"para_219"},{"text":"35","paragraph_id":"para_220"},{"text":"It stated that that provision is lawful because it is justified by the objective of improving road safety. That public interest requires that persons infringing traffic regulations, in particular those disregarding them systematically and in bad faith, be openly identified and that drivers of vehicles, by means of that transparency, be deterred from committing offences.","paragraph_id":"para_221"},{"text":"36","paragraph_id":"para_222"},{"text":"Furthermore, that provision is justified by the right of access to information, laid down by the Latvian Constitution.","paragraph_id":"para_223"},{"text":"37","paragraph_id":"para_224"},{"text":"The Latvian Parliament explained that, in practice, disclosure of the information contained in the national register of vehicles and their drivers is subject to the condition that the person requesting the information must provide the national identification number of the driver about whom he or she …","paragraph_id":"para_225"},{"text":"38","paragraph_id":"para_226"},{"text":"The CSDD pointed out that Article 14 1 (2) of the Law on road traffic does not impose any limits on either public access to or re-use of data relating to penalty points. As regards the contracts which it concludes with commercial re-users, the CSDD stated that they do not provide for legal transfer …","paragraph_id":"para_227"},{"text":"39","paragraph_id":"para_228"},{"text":"The Datu valsts inspekcija (data protection authority) expressed its doubts as to whether Article 14 1 (2) of the Law on road traffic is consistent with Article 96 of the Latvian Constitution which lays down the right to respect for private life. In its view, the importance and the objective of proc …","paragraph_id":"para_229"},{"text":"40","paragraph_id":"para_230"},{"text":"The Latvijas Republikas Satversmes tiesa (Constitutional Court) notes, first of all, that the constitutional complaint concerns Article 14 1 (2) of the Law on road traffic only in so far as that provision makes penalty points entered in the national register of vehicles and their drivers accessible to the public.","paragraph_id":"para_231"},{"text":"41","paragraph_id":"para_232"},{"text":"It observes, next, that penalty points are personal data and that, when assessing the right to respect for private life laid down in Article 96 of the Latvian Constitution, account is to be taken of the GDPR and, more generally, of Article 16 TFEU and Article 8 of the Charter.","paragraph_id":"para_233"},{"text":"42","paragraph_id":"para_234"},{"text":"As regards the objectives of the Latvian road traffic legislation, that court explains that it is in particular in order to promote road safety that offences committed by drivers, which are classified as administrative offences in Latvia, are entered in the register of convictions and that penalty points are entered in the national register of vehicles and their drivers.","paragraph_id":"para_235"},{"text":"43","paragraph_id":"para_236"},{"text":"So far as concerns, in particular, the national register of vehicles and their drivers, it states that that register enables the number of road traffic offences committed to be ascertained and measures to be implemented in the light of their number. The system relating to penalty points entered in t …","paragraph_id":"para_237"},{"text":"44","paragraph_id":"para_238"},{"text":"That court observes that it is not in dispute that Article 14 1 (2) of the Law on road traffic grants any person the right to request and obtain from the CSDD the information contained in the national register of vehicles and their drivers concerning the penalty points imposed on drivers. It confirms that, in practice, the information is provided to the person requesting it once that person indicates the national identification number of the driver concerned.","paragraph_id":"para_239"},{"text":"45","paragraph_id":"para_240"},{"text":"The Latvijas Republikas Satversmes tiesa (Constitutional Court) then explains that, since penalty points are classified as publicly accessible information, they fall within the scope of the Law on freedom of information and that that information may therefore be re-used for commercial or non-commercial purposes other than the initial purpose for which the information was created.","paragraph_id":"para_241"},{"text":"46","paragraph_id":"para_242"},{"text":"In order to interpret and apply Article 96 of the Latvian Constitution consistently with EU law, that court seeks to ascertain, first, whether information relating to penalty points is among the information referred to in Article 10 of the GDPR, that is to say, ‘personal data relating to criminal co …","paragraph_id":"para_243"},{"text":"47","paragraph_id":"para_244"},{"text":"That court states that Article 8(5) of Directive 95/46, which left it to each Member State to determine whether the special rules on data relating to offences and criminal convictions should be extended to data relating to administrative offences and sanctions, was, from 1 September 2007, implemente …","paragraph_id":"para_245"},{"text":"48","paragraph_id":"para_246"},{"text":"It adds that the scope of Article 10 of the GDPR must, in accordance with recital 4 of that regulation, be assessed in the light of the function of fundamental rights in society. In that respect, the objective of preventing a previous conviction from having an excessive adverse effect on a person’s …","paragraph_id":"para_247"},{"text":"49","paragraph_id":"para_248"},{"text":"The Latvijas Republikas Satversmes tiesa (Constitutional Court) raises, second, the question of the scope of Article 5 of the GDPR. It is unsure, in particular, whether the Latvian legislature has complied with the obligation, set out in Article 5(1)(f), requiring personal data to be processed with …","paragraph_id":"para_249"},{"text":"50","paragraph_id":"para_250"},{"text":"That court seeks, third, to ascertain whether Directive 2003/98 is relevant when examining whether Article 14 1 (2) of the Law on road traffic is compatible with the right to respect for private life. It is apparent from that directive that the re-use of personal data may be permitted only if that right is respected.","paragraph_id":"para_251"},{"text":"51","paragraph_id":"para_252"},{"text":"Fourth, in the light of the Court of Justice’s case-law according to which the interpretation of EU law provided in preliminary rulings has erga omnes and ex tunc effects, the Latvijas Republikas Satversmes tiesa (Constitutional Court) is uncertain whether, if Article 14 1 (2) of the Law on road tra …","paragraph_id":"para_253"},{"text":"52","paragraph_id":"para_254"},{"text":"It states that, under Latvian law, a measure that it declares unconstitutional is to be considered void from the day of delivery of its judgment, unless it decides otherwise. It explains that it must, in that regard, strike a balance between the principle of legal certainty and the fundamental rights of the various parties concerned.","paragraph_id":"para_255"},{"text":"53","paragraph_id":"para_256"},{"text":"In those circumstances, the Latvijas Republikas Satversmes tiesa (Constitutional Court) decided to stay the proceedings and to refer the following questions to the Court of Justice for a preliminary ruling:","paragraph_id":"para_257"},{"text":"‘(1)","paragraph_id":"para_258"},{"text":"Must the expression “processing of personal data relating to criminal convictions and offences or related security measures”, used in Article 10 of [the GDPR], be interpreted as meaning that it includes the processing of information relating to penalty points recorded against drivers for motoring offences as provided for in the provision at issue?","paragraph_id":"para_259"},{"text":"(2)","paragraph_id":"para_260"},{"text":"Irrespective of the answer to the first question, can the provisions of [the GDPR], in particular the principle of “integrity and confidentiality” referred to in Article 5(1)(f) thereof, be interpreted as meaning that they prohibit Member States from stipulating that information relating to penalty points recorded against drivers for motoring offences falls within the public domain and from allowing such data to be processed by being communicated?","paragraph_id":"para_261"},{"text":"(3)","paragraph_id":"para_262"},{"text":"Must recitals 50 and 154, Article 5(1)(b) and Article 10 of [the GDPR] and Article 1(2)(cc) of Directive 2003/98 be interpreted as meaning that they preclude legislation of a Member State which allows information relating to penalty points recorded against drivers for motoring offences to be transmitted for the purposes of re-use?","paragraph_id":"para_263"},{"text":"(4)","paragraph_id":"para_264"},{"text":"If any of the foregoing questions is answered in the affirmative, must the principle of the primacy of EU law and the principle of legal certainty be interpreted as meaning that it might be permissible to apply the provision at issue and maintain its legal effects until [the Satversmes tiesa (Constitutional Court) makes a final ruling]?’","paragraph_id":"para_265"},{"text":"Consideration of the questions referred","paragraph_id":"para_266"},{"text":"First question","paragraph_id":"para_267"},{"text":"54","paragraph_id":"para_268"},{"text":"By its first question, the referring court asks, in essence, whether Article 10 of the GDPR must be interpreted as applying to the processing of personal data relating to penalty points imposed on drivers of vehicles for road traffic offences, consisting in the public disclosure of such data.","paragraph_id":"para_269"},{"text":"55","paragraph_id":"para_270"},{"text":"Under Article 10 of the GDPR, processing of personal data relating to criminal convictions and offences or related security measures based on Article 6(1) is to be carried out only under the control of official authority or when the processing is authorised by EU or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects.","paragraph_id":"para_271"},{"text":"56","paragraph_id":"para_272"},{"text":"It should, therefore, first of all be determined whether the information relating to penalty points that is disclosed to third parties pursuant to the legislation at issue in the main proceedings constitutes ‘personal data’, within the meaning of Article 4(1) of the GDPR, and whether that disclosure constitutes ‘processing’ of such data, within the meaning of Article 4(2) of that regulation, that comes under its material scope as defined in Article 2.","paragraph_id":"para_273"},{"text":"57","paragraph_id":"para_274"},{"text":"In the first place, it is apparent from the order for reference that Latvian legislation provides for the imposition of penalty points on drivers of vehicles who have committed a road traffic offence and upon whom a financial or other penalty has been imposed. Those points are entered by a public body, the CSDD, in the national register of vehicles and their drivers on the day upon which the period for appealing against the decision imposing that penalty expires.","paragraph_id":"para_275"},{"text":"58","paragraph_id":"para_276"},{"text":"It is also apparent from the order for reference that road traffic offences and the penalties for punishing them fall within administrative law in Latvia and that the aim of imposing penalty points is not to inflict a further penalty but to heighten awareness of the drivers concerned, by encouraging them to adopt safer driving behaviour. When a certain number of penalty points is reached, the person concerned may be banned from driving for a specified period.","paragraph_id":"para_277"},{"text":"59","paragraph_id":"para_278"},{"text":"It is, in addition, clear from the order for reference that the legislation at issue in the main proceedings obliges the CSDD to disclose information relating to the penalty points imposed on a given driver to any person who requests access to that information. The CSDD merely requires, for that purpose, that the person seeking the information duly identifies the driver concerned by providing his or her national identification number.","paragraph_id":"para_279"},{"text":"60","paragraph_id":"para_280"},{"text":"It must therefore be found that the information relating to penalty points, which concerns an identified natural person, is ‘personal data’, within the meaning of Article 4(1) of the GDPR, and that its disclosure by the CSDD to third parties constitutes ‘processing’, within the meaning of Article 4(2) of the GDPR.","paragraph_id":"para_281"},{"text":"61","paragraph_id":"para_282"},{"text":"In the second place, the disclosure of that information falls within the very broad definition, set out in Article 2(1), of the GDPR’s material scope and is not included in the processing of personal data that Article 2(2)(a) and (d) of the GDPR excludes from its material scope.","paragraph_id":"para_283"},{"text":"62","paragraph_id":"para_284"},{"text":"First, Article 2(2)(a) of the GDPR provides that that regulation does not apply to the processing of personal data ‘in the course of an activity which falls outside the scope of Union law’. That exception to the applicability of the GDPR must, like the other exceptions laid down in Article 2(2), be …","paragraph_id":"para_285"},{"text":"63","paragraph_id":"para_286"},{"text":"In that regard, Article 2(2)(a) of the GDPR is to be read in conjunction with Article 2(2)(b) thereof and recital 16, which states that that regulation does not apply to the processing of personal data in the context of ‘activities which fall outside the scope of Union law, such as activities concerning national security’ and ‘activities in relation to the common foreign and security policy of the Union’.","paragraph_id":"para_287"},{"text":"64","paragraph_id":"para_288"},{"text":"It follows that Article 2(2)(a) and (b) of the GDPR represents partly a continuation of the first indent of Article 3(2) of Directive 95/46. Therefore, Article 2(2)(a) and (b) of the GDPR cannot be interpreted in broader terms than the exception resulting from the first indent of Article 3(2) of Dir …","paragraph_id":"para_289"},{"text":"65","paragraph_id":"para_290"},{"text":"As the Court has repeatedly held, only the processing of personal data in the course of an activity of the State or of State authorities which was expressly listed in Article 3(2) of Directive 95/46 or in the course of an activity which could be classified in the same category was excluded from the …","paragraph_id":"para_291"},{"text":"66","paragraph_id":"para_292"},{"text":"It follows that Article 2(2)(a) of the GDPR, read in the light of recital 16 thereof, must be regarded as being designed solely to exclude from the scope of that regulation the processing of personal data carried out by State authorities in the course of an activity which is intended to safeguard na …","paragraph_id":"para_293"},{"text":"67","paragraph_id":"para_294"},{"text":"The activities having the aim of safeguarding national security that are envisaged in Article 2(2)(a) of the GDPR encompass, in particular, as the Advocate General has also observed in essence in points 57 and 58 of his Opinion, those that are intended to protect essential State functions and the fundamental interests of society.","paragraph_id":"para_295"},{"text":"68","paragraph_id":"para_296"},{"text":"However, activities relating to road safety do not pursue such an objective and consequently cannot be classified in the category of activities having the aim of safeguarding national security, which are envisaged in Article 2(2)(a) of the GDPR.","paragraph_id":"para_297"},{"text":"69","paragraph_id":"para_298"},{"text":"Second, Article 2(2)(d) of the GDPR provides that that regulation does not apply to the processing of personal data ‘by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safegua …","paragraph_id":"para_299"},{"text":"70","paragraph_id":"para_300"},{"text":"It is apparent from recital 10 of Directive 2016/680 that the concept of ‘competent authority’ must be understood in relation to the protection of personal data in the fields of judicial cooperation in criminal matters and police cooperation, in view of the arrangements which may prove necessary, in …","paragraph_id":"para_301"},{"text":"71","paragraph_id":"para_302"},{"text":"In the light of the material available to the Court, it does not appear that, in carrying out the activities at issue in the main proceedings, which consist in disclosing to the public, for a road safety purpose, personal data relating to penalty points, the CSDD may be regarded as a ‘competent authority’, within the meaning of Article 3(7) of Directive 2016/680, and, therefore, that such activities may be covered by the exception laid down in Article 2(2) of the GDPR.","paragraph_id":"para_303"},{"text":"72","paragraph_id":"para_304"},{"text":"Therefore, the disclosure by the CSDD of the personal data relating to penalty points imposed on drivers of vehicles for road traffic offences falls within the material scope of the GDPR.","paragraph_id":"para_305"},{"text":"73","paragraph_id":"para_306"},{"text":"As to the applicability of Article 10 of the GDPR to such disclosure, the question is whether the information thereby disclosed constitutes personal data ‘relating to criminal convictions and offences or related security measures’, within the meaning of that provision, the processing of which ‘shall …","paragraph_id":"para_307"},{"text":"74","paragraph_id":"para_308"},{"text":"In that regard, it is to be noted that Article 10 of the GDPR is intended to ensure enhanced protection as regards processing which, because of the particular sensitivity of the data at issue, is liable to constitute a particularly serious interference with the fundamental rights to respect for priv …","paragraph_id":"para_309"},{"text":"75","paragraph_id":"para_310"},{"text":"Since the data to which Article 10 of the GDPR refers relates to behaviour that gives rise to social disapproval, the grant of access to such data is liable to stigmatise the data subject and thereby to constitute a serious interference with his or her private or professional life.","paragraph_id":"para_311"},{"text":"76","paragraph_id":"para_312"},{"text":"In the present instance, it is true that decisions of the Latvian authorities for the purpose of punishment of road traffic offences are, as the Latvian Government has stated in its replies to the Court’s questions, entered in the register of convictions, to which the public has access only in limit …","paragraph_id":"para_313"},{"text":"77","paragraph_id":"para_314"},{"text":"In order to determine whether such access amounts to processing of personal data relating to ‘offences’, within the meaning of Article 10 of the GDPR, it must be pointed out, first, that that term refers exclusively to criminal offences, as is apparent inter alia from the history of the GDPR. Whilst …","paragraph_id":"para_315"},{"text":"78","paragraph_id":"para_316"},{"text":"Accordingly, it must be held that, in deliberately not including the adjective ‘administrative’ in Article 10 of the GDPR, the EU legislature intended to limit the enhanced protection provided for by that provision to the criminal field alone.","paragraph_id":"para_317"},{"text":"79","paragraph_id":"para_318"},{"text":"As the Advocate General has observed in points 74 to 77 of his Opinion, that interpretation is borne out by the fact that a number of language versions of Article 10 of the GDPR make express reference to ‘criminal offences’, for example the versions in German ( Straftaten ), Spanish ( infracciones penales ), Italian ( reati ), Lithuanian ( nusikalstamas veikas ), Maltese ( reati ) and Dutch ( strafbare feiten ).","paragraph_id":"para_319"},{"text":"80","paragraph_id":"para_320"},{"text":"Second, the fact that road traffic offences are classified as administrative in Latvia is not decisive when determining whether those offences are covered by Article 10 of the GDPR.","paragraph_id":"para_321"},{"text":"81","paragraph_id":"para_322"},{"text":"In that regard, it should be pointed out that the terms of a provision of EU law which makes no express reference to the law of the Member States for the purpose of determining its meaning and scope must normally be given an autonomous and uniform interpretation throughout the European Union (judgments of 19 September 2000, Linster, C‑287/98 , EU:C:2000:468 , paragraph  43 , and of 1 October 2019, Planet49, C‑673/17 , EU:C:2019:801 , paragraph  47 ).","paragraph_id":"para_323"},{"text":"82","paragraph_id":"para_324"},{"text":"In the present instance, it is to be noted, first of all, that the GDPR does not contain any reference to national law so far as concerns the scope of the terms in Article 10 thereof, in particular the terms ‘offences’ and ‘criminal convictions’.","paragraph_id":"para_325"},{"text":"83","paragraph_id":"para_326"},{"text":"Next, it is apparent from recital 10 of the GDPR that that regulation is intended to contribute to the accomplishment of an area of freedom, security and justice by ensuring a consistent and high level of protection of natural persons with regard to the processing of personal data, which requires th …","paragraph_id":"para_327"},{"text":"84","paragraph_id":"para_328"},{"text":"Finally, as the Advocate General has observed in point 84 of his Opinion, that finding is supported by recital 13 of Directive 2016/680 which states that ‘a criminal offence within the meaning of this Directive should be an autonomous concept of Union law as interpreted by the Court of Justice of the European Union’.","paragraph_id":"para_329"},{"text":"85","paragraph_id":"para_330"},{"text":"It follows that the concept of ‘criminal offence’, which is decisive for determining whether Article 10 of the GDPR is applicable to personal data relating to road traffic offences, such as the data at issue in the main proceedings, requires an autonomous and uniform interpretation throughout the Eu …","paragraph_id":"para_331"},{"text":"86","paragraph_id":"para_332"},{"text":"Third, it must be examined whether road traffic offences, such as those which give rise to entry in the register of vehicles and their drivers of the penalty points whose disclosure to third parties is provided for by the provision at issue, constitute a ‘criminal offence’, for the purposes of Article 10 of the GDPR.","paragraph_id":"para_333"},{"text":"87","paragraph_id":"para_334"},{"text":"According to the Court’s case-law, three criteria are relevant for assessing whether an offence is criminal in nature. The first criterion is the legal classification of the offence under national law, the second is the intrinsic nature of the offence, and the third is the degree of severity of the …","paragraph_id":"para_335"},{"text":"88","paragraph_id":"para_336"},{"text":"Even in the case of offences which are not classified as ‘criminal’ by national law, the intrinsic nature of the offence in question and the degree of severity of the penalties to which it is liable to give rise may nevertheless result in its being criminal in nature (see, to that effect, judgment of 20 March 2018, Garlsson Real Estate and Others, C‑537/16 , EU:C:2018:193 , paragraphs  28 and  32 ).","paragraph_id":"para_337"},{"text":"89","paragraph_id":"para_338"},{"text":"As regards the criterion relating to the intrinsic nature of the offence, it must be ascertained whether the penalty at issue has a punitive purpose and the mere fact that it also pursues a deterrent purpose does not mean that it cannot be characterised as a criminal penalty. It is of the very natur …","paragraph_id":"para_339"},{"text":"90","paragraph_id":"para_340"},{"text":"So far as concerns the criterion relating to the degree of severity of the penalties to which the commission of those offences may give rise, it is to be noted, first of all, that only road traffic offences of a certain seriousness entail the giving of penalty points and that such offences are there …","paragraph_id":"para_341"},{"text":"91","paragraph_id":"para_342"},{"text":"This analysis is borne out by the case-law of the European Court of Human Rights according to which, notwithstanding the move towards ‘decriminalisation’ of road traffic offences in certain States, those offences must generally, in the light of the purpose, both deterrent and punitive, of the penalt …","paragraph_id":"para_343"},{"text":"92","paragraph_id":"para_344"},{"text":"The classification of road traffic offences which may result in the giving of penalty points as a ‘criminal offence’, for the purposes of Article 10 of the GDPR, is also consonant with the aim of that provision. The public disclosure of personal data relating to road traffic offences, including the …","paragraph_id":"para_345"},{"text":"93","paragraph_id":"para_346"},{"text":"It follows that road traffic offences which may result in penalty points being given are covered by the term ‘offences’ in Article 10 of the GDPR.","paragraph_id":"para_347"},{"text":"94","paragraph_id":"para_348"},{"text":"In the light of all the foregoing considerations, the answer to the first question referred is that Article 10 of the GDPR must be interpreted as applying to the processing of personal data relating to penalty points imposed on drivers of vehicles for road traffic offences.","paragraph_id":"para_349"},{"text":"Second question","paragraph_id":"para_350"},{"text":"95","paragraph_id":"para_351"},{"text":"By its second question, the referring court asks, in essence, whether the provisions of the GDPR must be interpreted as precluding national legislation which obliges the public body responsible for the register in which penalty points imposed on drivers of vehicles for road traffic offences are entered to disclose those data to any person who requests them, without that person having to establish a specific interest in obtaining the data.","paragraph_id":"para_352"},{"text":"96","paragraph_id":"para_353"},{"text":"All processing of personal data must comply, first, with the principles relating to processing of data set out in Article 5 of the GDPR and, second, with one of the principles relating to lawfulness of processing listed in Article 6 of that regulation (see, to that effect, judgment of 16 January 2019, Deutsche Post, C‑496/17 , EU:C:2019:26 , paragraph  57 and the case-law cited).","paragraph_id":"para_354"},{"text":"97","paragraph_id":"para_355"},{"text":"As regards the principles relating to processing of personal data, it is true that the referring court makes specific reference to the principles of ‘integrity’ and ‘confidentiality’ laid down in Article 5(1)(f) of the GDPR. Nevertheless, it is apparent from the doubts expressed by that court that i …","paragraph_id":"para_356"},{"text":"98","paragraph_id":"para_357"},{"text":"It follows that account should also be taken, in the answer to be provided to the referring court, of the other principles set out in Article 5(1) of the GDPR, in particular of the principle of ‘data minimisation’ in Article 5(1)(c), according to which personal data are to be adequate, relevant and …","paragraph_id":"para_358"},{"text":"99","paragraph_id":"para_359"},{"text":"So far as concerns the principles relating to lawfulness of processing, Article 6 of the GDPR sets out an exhaustive and restrictive list of the cases in which processing of personal data can be regarded as lawful. Thus, in order to be capable of being considered lawful, processing must fall within …","paragraph_id":"para_360"},{"text":"100","paragraph_id":"para_361"},{"text":"Furthermore, since, as has been held in paragraph 94 above, personal data relating to penalty points imposed on drivers of vehicles for road traffic offences are covered by Article 10 of the GDPR, their processing is subject to the additional restrictions laid down in that provision. Thus, under tha …","paragraph_id":"para_362"},{"text":"101","paragraph_id":"para_363"},{"text":"In the present instance, it is not in dispute that the processing of personal data at issue in the main proceedings, namely the public disclosure of data relating to penalty points imposed for road traffic offences, is carried out by a public body, the CSDD, which is the controller within the meanin …","paragraph_id":"para_364"},{"text":"102","paragraph_id":"para_365"},{"text":"Therefore, it is in the light both of the general rules governing lawfulness, in particular those laid down in Article 5(1)(c) and Article 6(1)(e) of the GDPR, and of the specific restrictions prescribed in Article 10 thereof that it should be examined whether national legislation such as that at issue in the main proceedings is consistent with that regulation.","paragraph_id":"para_366"},{"text":"103","paragraph_id":"para_367"},{"text":"In that regard, it is to be noted that none of those provisions lays down a general and absolute prohibition preventing a public authority from being empowered, or indeed compelled, under national legislation to disclose personal data to persons requesting such data.","paragraph_id":"para_368"},{"text":"104","paragraph_id":"para_369"},{"text":"Whilst Article 5(1)(c) of the GDPR requires the principle of ‘data minimisation’ to be observed when personal data are processed, it is clear from the wording of that provision that it is not intended to impose a general and absolute prohibition of that kind and that, in particular, it does not prec …","paragraph_id":"para_370"},{"text":"105","paragraph_id":"para_371"},{"text":"In that context, it should be borne in mind that the fundamental rights to respect for private life and to the protection of personal data are not absolute rights, but must be considered in relation to their function in society and be weighed against other fundamental rights. Limitations may therefo …","paragraph_id":"para_372"},{"text":"106","paragraph_id":"para_373"},{"text":"Therefore, in order to determine whether public disclosure of personal data relating to penalty points, such as the disclosure at issue in the main proceedings, is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, within the meaning …","paragraph_id":"para_374"},{"text":"107","paragraph_id":"para_375"},{"text":"In the present instance, the Latvian Parliament, in its observations before the referring court, and the Latvian Government, in its observations before the Court of Justice, contend that the disclosure by the CSDD of personal data relating to penalty points to any person who so requests falls within …","paragraph_id":"para_376"},{"text":"108","paragraph_id":"para_377"},{"text":"The improvement of road safety is an objective of general interest recognised by the European Union (see, to that effect, judgment of 23 April 2015, Aykul, C‑260/13 , EU:C:2015:257 , paragraph  69 and the case-law cited). Member States are therefore justified in classifying road safety as a ‘task carried out in the public interest’, within the meaning of Article 6(1)(e) of the GDPR.","paragraph_id":"para_378"},{"text":"109","paragraph_id":"para_379"},{"text":"However, in order to satisfy the conditions imposed by that provision, it is necessary that the disclosure of personal data relating to penalty points entered in the register kept by the CSDD genuinely meets the objective of general interest of improving road safety, without going beyond what is necessary in order to achieve that objective.","paragraph_id":"para_380"},{"text":"110","paragraph_id":"para_381"},{"text":"As recital 39 of the GDPR makes clear, that requirement of necessity is not met where the objective of general interest pursued can reasonably be achieved just as effectively by other means less restrictive of the fundamental rights of data subjects, in particular the rights to respect for private l …","paragraph_id":"para_382"},{"text":"111","paragraph_id":"para_383"},{"text":"As is clear from the practice of the Member States, each of them has a large number of methods, including that of deterrent punishment of road traffic offences, in particular by depriving the drivers concerned of the right to drive a vehicle, a ban whose breach may in turn be punished by effective s …","paragraph_id":"para_384"},{"text":"112","paragraph_id":"para_385"},{"text":"Furthermore, as has been pointed out in paragraph 92 above, the public disclosure of personal data relating to road traffic offences, including data relating to the penalty points imposed for committing them, is liable to constitute a serious interference with the fundamental rights to respect for private life and to the protection of personal data, since it may give rise to social disapproval and result in stigmatisation of the data subject.","paragraph_id":"para_386"},{"text":"113","paragraph_id":"para_387"},{"text":"In the light, first, of the sensitivity of the data in question and the seriousness of that interference with the fundamental rights of data subjects to respect for private life and to the protection of personal data and, second, of the fact that, having regard to the findings in paragraph 111 above …","paragraph_id":"para_388"},{"text":"114","paragraph_id":"para_389"},{"text":"Thus, whilst it may be justified to distinguish drivers who disregard the road traffic rules systematically and in bad faith from drivers who commit offences occasionally, the view cannot, however, be taken that identification of the first category of drivers must, for the purpose of improving road …","paragraph_id":"para_390"},{"text":"115","paragraph_id":"para_391"},{"text":"Moreover, it is apparent from the documents before the Court that the CSDD discloses to the public not only the data relating to penalty points imposed on drivers disregarding the road traffic rules systematically and in bad faith, but also the data relating to penalty points imposed on drivers comm …","paragraph_id":"para_392"},{"text":"116","paragraph_id":"para_393"},{"text":"So far as concerns the second objective mentioned in paragraph 107 above pursued by the legislation at issue in the main proceedings, it is apparent from the documents before the Court that, whilst a downward trend in the number of road traffic accidents may have been observed in Latvia, there is no …","paragraph_id":"para_394"},{"text":"117","paragraph_id":"para_395"},{"text":"The conclusion set out in paragraph 113 above is not invalidated by the fact that in practice the CSDD makes disclosure of the personal data at issue conditional on applicants stating the national identification number of the driver about whom they wish to enquire.","paragraph_id":"para_396"},{"text":"118","paragraph_id":"para_397"},{"text":"Even if, as the Latvian Government has stated, the disclosure of national identification numbers by the public bodies keeping the population registers is subject to strict requirements and thus complies with Article 87 of the GDPR, the fact remains that the legislation at issue in the main proceedin …","paragraph_id":"para_398"},{"text":"119","paragraph_id":"para_399"},{"text":"Nor is the conclusion set out in paragraph 113 above invalidated by the fact that the national register of vehicles and their drivers is an official document, within the meaning of Article 86 of the GDPR.","paragraph_id":"para_400"},{"text":"120","paragraph_id":"para_401"},{"text":"Whilst, as follows from recital 154 of the GDPR, public access to official documents constitutes a public interest capable of justifying the disclosure of personal data contained in such documents, that access must nevertheless be reconciled with the fundamental rights to respect for private live an …","paragraph_id":"para_402"},{"text":"121","paragraph_id":"para_403"},{"text":"Furthermore, for the same reason, the right to freedom of information referred to in Article 85 of the GDPR cannot be interpreted as justifying the disclosure to any person who so requests of personal data relating to penalty points imposed for road traffic offences.","paragraph_id":"para_404"},{"text":"122","paragraph_id":"para_405"},{"text":"In the light of all the foregoing, the answer to the second question is that the provisions of the GDPR, in particular Article 5(1), Article 6(1)(e) and Article 10 thereof, must be interpreted as precluding national legislation which obliges the public body responsible for the register in which pena …","paragraph_id":"para_406"},{"text":"Third question","paragraph_id":"para_407"},{"text":"123","paragraph_id":"para_408"},{"text":"By its third question, the referring court asks, in essence, whether the provisions of the GDPR, in particular Article 5(1)(b) and Article 10 thereof, and Article 1(2)(cc) of Directive 2003/98 must be interpreted as precluding national legislation which authorises the public body responsible for the register in which penalty points imposed on drivers of vehicles for road traffic offences are entered to disclose those data to economic operators for re-use.","paragraph_id":"para_409"},{"text":"124","paragraph_id":"para_410"},{"text":"As the referring court states, this question arises from the fact that the CSDD concludes contracts with economic operators pursuant to which it transmits to them the personal data relating to penalty points entered in the national register of vehicles and their drivers, in order, inter alia, to enable any person wishing to find out about the penalty points imposed on a particular driver to obtain such data not only from the CSDD but also from those economic operators.","paragraph_id":"para_411"},{"text":"125","paragraph_id":"para_412"},{"text":"It is clear from the answer to the second question that the provisions of the GDPR, in particular Article 5(1), Article 6(1)(e) and Article 10 thereof, must be interpreted as precluding national legislation which obliges the public body responsible for the register in which penalty points imposed on …","paragraph_id":"para_413"},{"text":"126","paragraph_id":"para_414"},{"text":"Those provisions must, for reasons identical to those set out in the answer to the second question, be interpreted as also precluding national legislation which authorises a public body to disclose data of that kind to economic operators in order for the data to be re-used and disclosed to the public by them.","paragraph_id":"para_415"},{"text":"127","paragraph_id":"para_416"},{"text":"Finally, so far as concerns Article 1(2)(cc) of Directive 2003/98, to which the third question also refers, as the Advocate General has observed in points 128 and 129 of his Opinion that provision is not relevant for the purpose of determining whether the rules of EU law on the protection of personal data preclude legislation such as that at issue in the main proceedings.","paragraph_id":"para_417"},{"text":"128","paragraph_id":"para_418"},{"text":"Irrespective of whether data relating to penalty points imposed on drivers for road traffic offences are covered by Directive 2003/98, the scope of the protection of those data must, in any event, be determined on the basis of the GDPR, as follows, first, from recital 154 of the GDPR and, second, fr …","paragraph_id":"para_419"},{"text":"129","paragraph_id":"para_420"},{"text":"In the light of the foregoing, the answer to the third question is that the provisions of the GDPR, in particular Article 5(1), Article 6(1)(e) and Article 10 thereof, must be interpreted as precluding national legislation which authorises the public body responsible for the register in which penalty points imposed on drivers of vehicles for road traffic offences are entered to disclose those data to economic operators for re-use.","paragraph_id":"para_421"},{"text":"Fourth question","paragraph_id":"para_422"},{"text":"130","paragraph_id":"para_423"},{"text":"By its fourth question, the referring court asks, in essence, whether the principle of primacy of EU law must be interpreted as precluding the constitutional court of a Member State, before which a complaint has been brought challenging national legislation that proves, in the light of a preliminary …","paragraph_id":"para_424"},{"text":"131","paragraph_id":"para_425"},{"text":"As is apparent from the order for reference, this question has been referred on account of the large number of legal relationships affected by the national legislation at issue in the main proceedings and of the fact that, under Article 32(3) of the Law on the Constitutional Court and the case-law r …","paragraph_id":"para_426"},{"text":"132","paragraph_id":"para_427"},{"text":"In that regard, it should be recalled that the interpretation which, in the exercise of the jurisdiction conferred on it by Article 267 TFEU, the Court gives to rules of EU law clarifies and defines the meaning and scope of those rules as they must be or ought to have been understood and applied fro …","paragraph_id":"para_428"},{"text":"133","paragraph_id":"para_429"},{"text":"As the Court has consistently held, such a restriction may be allowed only in the actual judgment ruling upon the interpretation sought. Indeed, there must necessarily be a single occasion when a decision is made on the temporal effects of the requested interpretation which the Court gives of a prov …","paragraph_id":"para_430"},{"text":"134","paragraph_id":"para_431"},{"text":"Consequently, the temporal effects of a preliminary ruling given by the Court cannot depend on the date of delivery of the judgment by which the referring court rules finally on the main action, or even on the referring court’s assessment of the need to preserve the legal effects of the national legislation at issue.","paragraph_id":"para_432"},{"text":"135","paragraph_id":"para_433"},{"text":"By virtue of the principle of primacy of EU law, rules of national law, even of a constitutional order, cannot be allowed to undermine the unity and effectiveness of EU law (see, to that effect, judgments of 26 February 2013, Melloni, C‑399/11 , EU:C:2013:107 , paragraph  59 , and of 29 July 2019, P …","paragraph_id":"para_434"},{"text":"136","paragraph_id":"para_435"},{"text":"In this instance, since a risk of serious difficulties resulting from the interpretation adopted by the Court in the present judgment has not been shown to exist and the criteria referred to in paragraph 132 above are cumulative, it is not appropriate to limit the judgment’s temporal effects.","paragraph_id":"para_436"},{"text":"137","paragraph_id":"para_437"},{"text":"In the light of the foregoing, the answer to the fourth question is that the principle of primacy of EU law must be interpreted as precluding the constitutional court of a Member State, before which a complaint has been brought challenging national legislation that proves, in the light of a prelimin …","paragraph_id":"para_438"},{"text":"Costs","paragraph_id":"para_439"},{"text":"138","paragraph_id":"para_440"},{"text":"Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the national court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.","paragraph_id":"para_441"},{"text":"On those grounds, the Court (Grand Chamber) hereby rules:","paragraph_id":"para_442"},{"text":"1.","paragraph_id":"para_443"},{"text":"Article 10 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), must be interpreted as applying to the processing of personal data relating to penalty points imposed on drivers of vehicles for road traffic offences.","paragraph_id":"para_444"},{"text":"2.","paragraph_id":"para_445"},{"text":"The provisions of Regulation (EU) 2016/679, in particular Article 5(1), Article 6(1)(e) and Article 10 thereof, must be interpreted as precluding national legislation which obliges the public body responsible for the register in which penalty points imposed on drivers of vehicles for road traffic offences are entered to make those data accessible to the public, without the person requesting access having to establish a specific interest in obtaining the data.","paragraph_id":"para_446"},{"text":"3.","paragraph_id":"para_447"},{"text":"The provisions of Regulation (EU) 2016/679, in particular Article 5(1), Article 6(1)(e) and Article 10 thereof, must be interpreted as precluding national legislation which authorises the public body responsible for the register in which penalty points imposed on drivers of vehicles for road traffic offences are entered to disclose those data to economic operators for re-use.","paragraph_id":"para_448"},{"text":"4.","paragraph_id":"para_449"},{"text":"The principle of primacy of EU law must be interpreted as precluding the constitutional court of a Member State, before which a complaint has been brought challenging national legislation that proves, in the light of a preliminary ruling given by the Court of Justice, to be incompatible with EU law, …","paragraph_id":"para_450"},{"text":"[Signatures]","paragraph_id":"para_451"},{"text":"(\n *1\n ) Language of the case: Latvian.","paragraph_id":"para_452"}],"word_count":14320,"cites":["C-272/19","C-311/18","C-101/01","C-73/16","C-25/17","C-136/17","C-287/98","C-673/17","C-60/12","C-489/10","C-537/16","C-481/19","C-496/17","C-708/18","C-398/15","C-260/13","C-92/09","C-93/09","C-292/04","C-401/13","C-432/13","C-276/14","C-581/10","C-629/10","C-432/17","C-399/11","C-476/17","C-409/06"],"sha256":"1053a8f70ca0ae8f9badbb125658c8fb6b22ab38c3e2bde1ffda4d39d0532309","source_url":"https://publications.europa.eu/resource/celex/62019CJ0439.ENG.xhtml.ECR_62019CJ0439_EN_01.html","fetched_at":"2026-10-01T11:09:52.375+00:00","canonical":"https://legal.exploreworldai.com/ai/judgments/eu/c-439-19","risk_graph":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-439-19","relations_graph":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-439-19","changes":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes","agent":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-439-19"},"hash":"sha256:55b6c3624be7279f1ea7aa1a7c2ec91d6047d2a20173f23d81318780a14de1fe","version":"legal-2026-10-14","expires":"2026-10-16T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-14+legal-2026-10-14+2026-10-14T19:52:40","content_hash":"sha256:55b6c3624be7279f1ea7aa1a7c2ec91d6047d2a20173f23d81318780a14de1fe","revalidate_after":"2026-10-15T07:06:31.887Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-439-19","follow":[{"rel":"risk","href":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-439-19"},{"rel":"relations","href":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-439-19"},{"rel":"agent","href":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-439-19"},{"rel":"obligations","href":"https://legal.exploreworldai.com/api/public/v1/obligation-chain"},{"rel":"changes","href":"https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu"}],"disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"withheld":{"item.cited_by":9},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"public","access_view":"public","citation":{"citation_url":"https://legal.exploreworldai.com/eu/praxis/c-439-19","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-91251f8c6e4162cc851c81c3989c58d0","response_hash":"sha256:55b6c3624be7279f1ea7aa1a7c2ec91d6047d2a20173f23d81318780a14de1fe"}},"freshness":{"freshness_class":"stable","as_of":"2026-11-02T11:05:42.847Z","valid_for":604800,"recheck":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu%3Ac-439-19","note":"Oföränderligt objekt med hash. Får cachas länge.","tokens":29635}}