{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-507-23","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-507-23)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:eu:f6410a","proof":"sha256:11f4888df4a2443a56600071ef06918119e0725f07b8399619ba65a06b9009c7","jurisdiction":"eu","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","item":{"schema_version":"1.0.0","id":"eu:c-507-23","jurisdiction":"eu","lang":"en","brand_source":"Source: NovaCopilot","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"sections":[{"title":"62023CJ0507","paragraphs":[]},{"title":"JUDGMENT OF THE COURT (Eighth Chamber)","paragraphs":[]},{"title":"4 October 2024 (\n *1\n )","paragraphs":["para_4","para_5","para_6"]},{"title":"A","paragraphs":["para_8","para_9","para_10","para_11","para_12","para_13","para_14","para_15","para_16","para_17","para_18","para_19","para_20","para_21"]},{"title":"Judgment","paragraphs":[]},{"title":"1","paragraphs":["para_24"]},{"title":"2","paragraphs":["para_26"]},{"title":"Legal context","paragraphs":[]},{"title":"European Union law","paragraphs":[]},{"title":"3","paragraphs":[]},{"title":"Recitals 1, 75, 85, 146 and 148 of the GDPR are worded as follows:","paragraphs":["para_31","para_32","para_33"]},{"title":"(75)","paragraphs":["para_35","para_36"]},{"title":"(85)","paragraphs":["para_38","para_39"]},{"title":"(146)","paragraphs":["para_41","para_42"]},{"title":"(148)","paragraphs":["para_44"]},{"title":"4","paragraphs":["para_46","para_47"]},{"title":"5","paragraphs":[]},{"title":"Article 4 of the regulation, entitled ‘Definitions’, provides:","paragraphs":["para_50"]},{"title":"(1)","paragraphs":["para_52","para_53"]},{"title":"(7)","paragraphs":["para_55","para_56"]},{"title":"(12)","paragraphs":["para_58","para_59"]},{"title":"6","paragraphs":["para_61"]},{"title":"7","paragraphs":["para_63"]},{"title":"8","paragraphs":["para_65","para_66","para_67"]},{"title":"9","paragraphs":["para_69","para_70"]},{"title":"(a)","paragraphs":["para_72"]},{"title":"(b)","paragraphs":["para_74"]},{"title":"(c)","paragraphs":["para_76","para_77"]},{"title":"(k)","paragraphs":["para_79"]},{"title":"10","paragraphs":[]},{"title":"Article 84 of that regulation, entitled ‘Penalties’, provides, in paragraph 1:","paragraphs":["para_82"]},{"title":"Latvian law","paragraphs":[]},{"title":"11","paragraphs":["para_85","para_86","para_87","para_88","para_89"]},{"title":"The dispute in the main proceedings and the questions referred for a preliminary ruling","paragraphs":[]},{"title":"12","paragraphs":["para_92"]},{"title":"13","paragraphs":["para_94"]},{"title":"14","paragraphs":["para_96"]},{"title":"15","paragraphs":["para_98"]},{"title":"16","paragraphs":["para_100"]},{"title":"17","paragraphs":["para_102"]},{"title":"18","paragraphs":["para_104"]},{"title":"19","paragraphs":["para_106"]},{"title":"20","paragraphs":["para_108"]},{"title":"21","paragraphs":["para_110","para_111","para_112"]},{"title":"(2)","paragraphs":["para_114"]},{"title":"(3)","paragraphs":["para_116"]},{"title":"Consideration of the questions referred","paragraphs":[]},{"title":"The first question","paragraphs":[]},{"title":"22","paragraphs":["para_120"]},{"title":"23","paragraphs":["para_122"]},{"title":"24","paragraphs":["para_124"]},{"title":"25","paragraphs":["para_126"]},{"title":"26","paragraphs":["para_128"]},{"title":"27","paragraphs":["para_130"]},{"title":"28","paragraphs":["para_132"]},{"title":"29","paragraphs":["para_134"]},{"title":"The second question","paragraphs":[]},{"title":"30","paragraphs":["para_137"]},{"title":"31","paragraphs":["para_139"]},{"title":"32","paragraphs":["para_141"]},{"title":"33","paragraphs":["para_143"]},{"title":"34","paragraphs":["para_145"]},{"title":"35","paragraphs":["para_147"]},{"title":"36","paragraphs":["para_149"]},{"title":"37","paragraphs":["para_151"]},{"title":"The third question","paragraphs":[]},{"title":"38","paragraphs":["para_154"]},{"title":"39","paragraphs":["para_156"]},{"title":"40","paragraphs":["para_158"]},{"title":"41","paragraphs":["para_160"]},{"title":"42","paragraphs":["para_162"]},{"title":"43","paragraphs":["para_164"]},{"title":"44","paragraphs":["para_166"]},{"title":"45","paragraphs":["para_168"]},{"title":"Costs","paragraphs":[]},{"title":"46","paragraphs":["para_171"]},{"title":"On those grounds, the Court (Eighth Chamber) hereby rules:","paragraphs":["para_173","para_174","para_175","para_176"]},{"title":"Article 82(1) of Regulation 2016/679","paragraphs":["para_178","para_179"]},{"title":"Article 82(1) of Regulation 2016/679","paragraphs":["para_181","para_182","para_183"]}],"paragraphs":[{"text":"62023CJ0507","paragraph_id":"para_1"},{"text":"JUDGMENT OF THE COURT (Eighth Chamber)","paragraph_id":"para_2"},{"text":"4 October 2024 (\n *1\n )","paragraph_id":"para_3"},{"text":"(Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Article 82(1) – Right to compensation and liability – Unlawful processing of data – Infringement of the right to protection of personal data – Concept of ‘damage’ – Compensation for non-material damage in …","paragraph_id":"para_4"},{"text":"In Case C‑507/23,","paragraph_id":"para_5"},{"text":"REQUEST for a preliminary ruling under Article 267 TFEU from the Augstākā tiesa (Senāts) (Supreme Court, Latvia), made by decision of 7 August 2023, received at the Court on 8 August 2023, in the proceedings","paragraph_id":"para_6"},{"text":"A","paragraph_id":"para_7"},{"text":"v","paragraph_id":"para_8"},{"text":"Patērētāju tiesību aizsardzības centrs,","paragraph_id":"para_9"},{"text":"THE COURT (Eighth Chamber),","paragraph_id":"para_10"},{"text":"composed of N. Piçarra, President of the Chamber, N. Jääskinen (Rapporteur) and M. Gavalec, Judges,","paragraph_id":"para_11"},{"text":"Advocate General: M. Szpunar,","paragraph_id":"para_12"},{"text":"Registrar: A. Calot Escobar,","paragraph_id":"para_13"},{"text":"having regard to the written procedure,","paragraph_id":"para_14"},{"text":"after considering the observations submitted on behalf of:","paragraph_id":"para_15"},{"text":"–","paragraph_id":"para_16"},{"text":"the Latvian Government, by J. Davidoviča and K. Pommere, acting as Agents,","paragraph_id":"para_17"},{"text":"–","paragraph_id":"para_18"},{"text":"the European Commission, by A. Bouchagiar, H. Kranenborg and I. Naglis, acting as Agents,","paragraph_id":"para_19"},{"text":"having decided, after hearing the Advocate General, to proceed to judgment without an Opinion,","paragraph_id":"para_20"},{"text":"gives the following","paragraph_id":"para_21"},{"text":"Judgment","paragraph_id":"para_22"},{"text":"1","paragraph_id":"para_23"},{"text":"This request for a preliminary ruling concerns the interpretation of Article 82(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ( OJ 2016 L 119, p. 1 ; ‘the GDPR’).","paragraph_id":"para_24"},{"text":"2","paragraph_id":"para_25"},{"text":"The request has been made in proceedings between A and the Patērētāju tiesību aizsardzības centrs (Consumer Rights Protection Centre, Latvia) (‘the PTAC’) concerning compensation for the non-material damage which the applicant in the main proceedings claims to have suffered as a result of the PTAC having processed his personal data without his permission.","paragraph_id":"para_26"},{"text":"Legal context","paragraph_id":"para_27"},{"text":"European Union law","paragraph_id":"para_28"},{"text":"3","paragraph_id":"para_29"},{"text":"Recitals 1, 75, 85, 146 and 148 of the GDPR are worded as follows:","paragraph_id":"para_30"},{"text":"‘(1)","paragraph_id":"para_31"},{"text":"The protection of natural persons in relation to the processing of personal data is a fundamental right. Article 8(1) of the Charter of Fundamental Rights of the European Union (the “Charter”) and Article 16(1) [TFEU] provide that everyone has the right to the protection of personal data concerning him or her.","paragraph_id":"para_32"},{"text":"…","paragraph_id":"para_33"},{"text":"(75)","paragraph_id":"para_34"},{"text":"The risk to the rights and freedoms of natural persons, of varying likelihood and severity, may result from personal data processing which could lead to physical, material or non-material damage, in particular: where the processing may give rise to … damage to the reputation, … or any other significant economic or social disadvantage; where data subjects might be deprived of their rights and freedoms or prevented from exercising control over their personal data; …","paragraph_id":"para_35"},{"text":"…","paragraph_id":"para_36"},{"text":"(85)","paragraph_id":"para_37"},{"text":"A personal data breach may, if not addressed in an appropriate and timely manner, result in physical, material or non-material damage to natural persons such as loss of control over their personal data or limitation of their rights, … damage to reputation, … or any other significant economic or social disadvantage to the natural person concerned. …","paragraph_id":"para_38"},{"text":"…","paragraph_id":"para_39"},{"text":"(146)","paragraph_id":"para_40"},{"text":"The controller or processor should compensate any damage which a person may suffer as a result of processing that infringes this Regulation. … The concept of damage should be broadly interpreted in the light of the case-law of the Court of Justice in a manner which fully reflects the objectives of t …","paragraph_id":"para_41"},{"text":"…","paragraph_id":"para_42"},{"text":"(148)","paragraph_id":"para_43"},{"text":"In order to strengthen the enforcement of the rules of this Regulation, penalties including administrative fines should be imposed for any infringement of this Regulation … Due regard should however be given to the nature, gravity and duration of the infringement, the intentional character of the infringement, actions taken to mitigate the damage suffered, degree of responsibility … and any other aggravating or mitigating factor. …’","paragraph_id":"para_44"},{"text":"4","paragraph_id":"para_45"},{"text":"Article 1 of that regulation, entitled ‘Subject matter and objectives’, provides, in paragraph 2:","paragraph_id":"para_46"},{"text":"‘This Regulation protects fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data.’","paragraph_id":"para_47"},{"text":"5","paragraph_id":"para_48"},{"text":"Article 4 of the regulation, entitled ‘Definitions’, provides:","paragraph_id":"para_49"},{"text":"‘For the purposes of this Regulation:","paragraph_id":"para_50"},{"text":"(1)","paragraph_id":"para_51"},{"text":"“personal data” means any information relating to an identified or identifiable natural person (“data subject”); …","paragraph_id":"para_52"},{"text":"…","paragraph_id":"para_53"},{"text":"(7)","paragraph_id":"para_54"},{"text":"“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; …","paragraph_id":"para_55"},{"text":"…","paragraph_id":"para_56"},{"text":"(12)","paragraph_id":"para_57"},{"text":"“personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;","paragraph_id":"para_58"},{"text":"…’","paragraph_id":"para_59"},{"text":"6","paragraph_id":"para_60"},{"text":"Article 6 of that regulation, entitled ‘Lawfulness of processing’, provides in paragraph 1 that the processing of personal data is lawful only if and to the extent that at least one of the conditions listed in that article applies.","paragraph_id":"para_61"},{"text":"7","paragraph_id":"para_62"},{"text":"Chapter VIII of the GDPR, entitled ‘Remedies, liability and penalties’, contains Articles 77 to 84 of that regulation.","paragraph_id":"para_63"},{"text":"8","paragraph_id":"para_64"},{"text":"Article 82 of the regulation, entitled ‘Right to compensation and liability’, states in paragraphs 1 and 2:","paragraph_id":"para_65"},{"text":"‘1.   Any person who has suffered material or non-material damage as a result of an infringement of this Regulation shall have the right to receive compensation from the controller or processor for the damage suffered.","paragraph_id":"para_66"},{"text":"2.   Any controller involved in processing shall be liable for the damage caused by processing which infringes this Regulation. …’","paragraph_id":"para_67"},{"text":"9","paragraph_id":"para_68"},{"text":"Article 83 of the GDPR, entitled ‘General conditions for imposing administrative fines’, provides in paragraph 2:","paragraph_id":"para_69"},{"text":"‘… When deciding whether to impose an administrative fine and deciding on the amount of the administrative fine in each individual case due regard shall be given to the following:","paragraph_id":"para_70"},{"text":"(a)","paragraph_id":"para_71"},{"text":"the nature, gravity and duration of the infringement taking into account the nature[,] scope or purpose of the processing concerned as well as the number of data subjects affected and the level of damage suffered by them;","paragraph_id":"para_72"},{"text":"(b)","paragraph_id":"para_73"},{"text":"the intentional or negligent character of the infringement;","paragraph_id":"para_74"},{"text":"(c)","paragraph_id":"para_75"},{"text":"any action taken by the controller or processor to mitigate the damage suffered by data subjects;","paragraph_id":"para_76"},{"text":"…","paragraph_id":"para_77"},{"text":"(k)","paragraph_id":"para_78"},{"text":"any other aggravating or mitigating factor applicable to the circumstances of the case, such as financial benefits gained, or losses avoided, directly or indirectly, from the infringement.’","paragraph_id":"para_79"},{"text":"10","paragraph_id":"para_80"},{"text":"Article 84 of that regulation, entitled ‘Penalties’, provides, in paragraph 1:","paragraph_id":"para_81"},{"text":"‘Member States shall lay down the rules on other penalties applicable to infringements of this Regulation in particular for infringements which are not subject to administrative fines pursuant to Article 83, and shall take all measures necessary to ensure that they are implemented. Such penalties shall be effective, proportionate and dissuasive.’","paragraph_id":"para_82"},{"text":"Latvian law","paragraph_id":"para_83"},{"text":"11","paragraph_id":"para_84"},{"text":"Article 14, entitled ‘Determination of compensation for non-material damage’, of the Valsts pārvaldes iestāžu nodarīto zaudējumu atlīdzināšanas likums (Law on compensation for damage caused by public authorities) of 2 June 2005 ( Latvijas Vēstnesis , 2005, No 96), in the version applicable to the dispute in the main proceedings (‘the Law of 2005’), provides:","paragraph_id":"para_85"},{"text":"‘1.   Compensation for non-material damage shall be determined in relation to the importance of the rights infringed and of the interests protected by law and in relation to the seriousness of the interference in question, in the light of the factual and legal basis and reasons for the conduct of the authority, the conduct and the joint responsibility of the victim and other circumstances relevant to the particular case.","paragraph_id":"para_86"},{"text":"2.   Compensation for non-material damage shall be provided by means of the restoration of the situation existing before the damage was caused or, where that is not possible or is not possible in full, or, where that is inadequate, by means of an apology or the payment of a suitable amount of compensation.","paragraph_id":"para_87"},{"text":"3.   If, after assessing the circumstances of the particular case, the authority or court finds the interference with the rights or legally protected interests of the individual not to be serious, a written or public apology may constitute a standalone or supplementary form of redress for the non-material damage.","paragraph_id":"para_88"},{"text":"4.   Compensation for non-material damage shall amount to a maximum of EUR 7000. Where serious non-material damage is caused, compensation may amount to a maximum of EUR 10000; however, where harm has been caused to an individual’s life or there has been particularly serious harm to his or her health, the maximum amount of compensation may be up to EUR 30000.’","paragraph_id":"para_89"},{"text":"The dispute in the main proceedings and the questions referred for a preliminary ruling","paragraph_id":"para_90"},{"text":"12","paragraph_id":"para_91"},{"text":"The applicant in the main proceedings is well known in Latvia as a journalist who is an expert in the automotive sector.","paragraph_id":"para_92"},{"text":"13","paragraph_id":"para_93"},{"text":"During a campaign to make consumers aware of the risks involved in purchasing a second-hand vehicle, the PTAC distributed a video on several Internet sites which, among other things, featured a character imitating the applicant in the main proceedings, without his consent.","paragraph_id":"para_94"},{"text":"14","paragraph_id":"para_95"},{"text":"Despite the latter’s stated opposition to the making and distribution of that video, it has remained available online. The PTAC also rejected his explicit requests for the distribution of the video to cease and for compensation for damage to his reputation.","paragraph_id":"para_96"},{"text":"15","paragraph_id":"para_97"},{"text":"The applicant in the main proceedings subsequently brought an action before the Administratīvā rajona tiesa (District Administrative Court, Latvia) seeking, first, a finding that the actions of the PTAC, consisting in the use and distribution of his personal data without authorisation, were unlawful …","paragraph_id":"para_98"},{"text":"16","paragraph_id":"para_99"},{"text":"By judgment of 20 May 2023, the Administratīvā apgabaltiesa (Regional Administrative Court, Latvia), ruling on appeal, confirmed that the processing of personal data by the PTAC was unlawful, on the basis of Article 6 of the GDPR, and ordered that conduct to cease; it also required the publication o …","paragraph_id":"para_100"},{"text":"17","paragraph_id":"para_101"},{"text":"In his appeal on a point of law lodged with the Augstākā tiesa (Senāts) (Supreme Court, Latvia), which is the referring court in the present case, the applicant in the main proceedings contests that judgment in so far as it refused financial compensation for his non-material damage. He claims, in es …","paragraph_id":"para_102"},{"text":"18","paragraph_id":"para_103"},{"text":"In the first place, the referring court considers, in the light of the judgment of 4 May 2023, Österreichische Post\n (Non-material damage in connection with the processing of personal data) (C‑300/21; ‘the judgment in Österreichische Post ’, EU:C:2023:370 ), that Article 82 of the GDPR does not enab …","paragraph_id":"para_104"},{"text":"19","paragraph_id":"para_105"},{"text":"In the second place, the referring court raises the question of adequate compensation for non-material damage under Article 82(1) of the GDPR, as interpreted in the judgment of 4 May 2023, Österreichische Post ( C‑300/21 , EU:C:2023:370 ). It wishes to know whether the obligation to make an apology …","paragraph_id":"para_106"},{"text":"20","paragraph_id":"para_107"},{"text":"In the third and last place, the referring court raises the question, having regard to paragraph 58 of the abovementioned judgment, of whether Article 82(1) of the GDPR makes it possible, in assessing the form and level of compensation due in that respect, to take account of the circumstances related to, or even justifying, the actions of the party which has infringed that regulation.","paragraph_id":"para_108"},{"text":"21","paragraph_id":"para_109"},{"text":"In those circumstances, the Augstākā tiesa (Senāts) (Supreme Court (Senate)) decided to stay the proceedings and to refer the following questions to the Court of Justice for a preliminary ruling:","paragraph_id":"para_110"},{"text":"‘(1)","paragraph_id":"para_111"},{"text":"Must Article 82(1) of [the GDPR] be interpreted as meaning that the unlawful processing of personal data, in so far as it is an infringement of that regulation, may, in itself, constitute unjustified interference with a person’s subjective right to the protection of his or her data and damage caused to that person?","paragraph_id":"para_112"},{"text":"(2)","paragraph_id":"para_113"},{"text":"Must Article 82(1) of [the GDPR] be interpreted as meaning that, where there is no possibility of restoring the situation that existed before the damage was caused, it permits the imposition of the obligation to apologise as the sole form of compensation for non-material damage?","paragraph_id":"para_114"},{"text":"(3)","paragraph_id":"para_115"},{"text":"Must Article 82(1) of [the GDPR] be interpreted as meaning that it permits a smaller amount of compensation for the damage caused to be set on the basis of circumstances that are indicative of the attitude and motivation of the person processing the data (for example, the need to perform a task carried out in the public interest, the lack of intent to cause damage to the person concerned or difficulties in understanding the legal framework)?’","paragraph_id":"para_116"},{"text":"Consideration of the questions referred","paragraph_id":"para_117"},{"text":"The first question","paragraph_id":"para_118"},{"text":"22","paragraph_id":"para_119"},{"text":"By its first question, the referring court asks, in essence, whether Article 82(1) of the GDPR, read in the light of Article 8(1) of the Charter, must be interpreted as meaning that an infringement of the provisions of that regulation is sufficient, in itself, to constitute ‘damage’ within the meaning of Article 82(1).","paragraph_id":"para_120"},{"text":"23","paragraph_id":"para_121"},{"text":"Article 82(1) of the GDPR provides that ‘any person who has suffered material or non-material damage as a result of an infringement of this Regulation shall have the right to receive compensation from the controller or processor for the damage suffered.’","paragraph_id":"para_122"},{"text":"24","paragraph_id":"para_123"},{"text":"The Court has repeatedly interpreted Article 82(1) to the effect that mere infringement of that regulation is not sufficient to confer a right to compensation on that basis, since the existence of ‘damage’, whether material or non-material, or of ‘damage’ which has been ‘suffered’ constitutes one of …","paragraph_id":"para_124"},{"text":"25","paragraph_id":"para_125"},{"text":"Since those three cumulative conditions are necessary and sufficient in order to have a right to compensation for the purposes of Article 82(1) of the GDPR (judgment of 14 December 2023, Gemeinde Ummendorf, C‑456/22 , EU:C:2023:988 , paragraph  14 ), that right cannot be made contingent on an additi …","paragraph_id":"para_126"},{"text":"26","paragraph_id":"para_127"},{"text":"Furthermore, the Court has stated that even if the provision of the GDPR that has been infringed grants rights to natural persons, such an infringement cannot, in itself, be such as to constitute ‘non-material damage’, within the meaning of that regulation, and to found a right to compensation on th …","paragraph_id":"para_128"},{"text":"27","paragraph_id":"para_129"},{"text":"That interpretation of Article 82(1) of the GDPR is supported by recitals 75, 85 and 146 of that regulation. It is apparent from those recitals, first, that the occurrence of damage in the context of the unlawful processing of personal data is only a potential and not an automatic consequence of suc …","paragraph_id":"para_130"},{"text":"28","paragraph_id":"para_131"},{"text":"That interpretation is thus capable of ensuring the protection of personal data as a fundamental right laid down in Article 8(1) of the Charter, to which recital 1 of the GDPR refers.","paragraph_id":"para_132"},{"text":"29","paragraph_id":"para_133"},{"text":"In the light of the foregoing, the answer to the first question is that Article 82(1) of the GDPR, read in the light of Article 8(1) of the Charter, must be interpreted as meaning that an infringement of the provisions of that regulation is not sufficient, in itself, to constitute ‘damage’, within the meaning of Article 82(1).","paragraph_id":"para_134"},{"text":"The second question","paragraph_id":"para_135"},{"text":"30","paragraph_id":"para_136"},{"text":"By its second question, the referring court asks, in essence, whether Article 82(1) of the GDPR must be interpreted as meaning that the making of an apology may constitute sufficient compensation for non-material damage on the basis of that provision, inter alia where it is impossible to restore the situation that existed prior to the occurrence of that damage.","paragraph_id":"para_137"},{"text":"31","paragraph_id":"para_138"},{"text":"According to settled case-law, it is for the national legal order of each Member State to establish procedural rules for actions intended to safeguard the rights of individuals, in accordance with the principle of procedural autonomy, on condition, however, that those rules are not, in situations co …","paragraph_id":"para_139"},{"text":"32","paragraph_id":"para_140"},{"text":"In the present case, since the GDPR does not contain any provision intended to define the rules on the assessment of the damages due under the right to compensation laid down in Article 82 of that regulation, national courts must, to that end, apply the domestic rules of each Member State relating t …","paragraph_id":"para_141"},{"text":"33","paragraph_id":"para_142"},{"text":"In that respect, as regards observance of the principle of equivalence, the Court has nothing before it that is capable of showing that that principle may have a specific effect in the main proceedings in the present case.","paragraph_id":"para_143"},{"text":"34","paragraph_id":"para_144"},{"text":"As regards observance of the principle of effectiveness, the exclusively compensatory function of the right to compensation laid down in Article 82 of the GDPR means that the criteria for assessing the compensation due under that article must be prescribed within the legal system of each Member Stat …","paragraph_id":"para_145"},{"text":"35","paragraph_id":"para_146"},{"text":"Furthermore, the Court has accepted that where the damage suffered by the data subject is not serious, a national court may compensate for it by awarding minimal compensation to that person, provided that the small amount of damages thus granted is such as to offset in full that damage, which it is for that court to ascertain (see, to that effect, judgment of 20 June 2024, Scalable Capital, C‑182/22 and C‑189/22 , EU:C:2024:531 , paragraph  46 ).","paragraph_id":"para_147"},{"text":"36","paragraph_id":"para_148"},{"text":"Likewise, Article 82(1) of the GDPR does not preclude the making of an apology from being able to constitute standalone or supplementary compensation for non-material damage, as laid down in the present case in Article 14 of the Law of 2005, provided that such a form of compensation complies with th …","paragraph_id":"para_149"},{"text":"37","paragraph_id":"para_150"},{"text":"In the light of the foregoing reasons, the answer to the second question is that Article 82(1) of the GDPR must be interpreted as meaning that the making of an apology may constitute sufficient compensation for non-material damage on the basis of that provision, inter alia where it is impossible to …","paragraph_id":"para_151"},{"text":"The third question","paragraph_id":"para_152"},{"text":"38","paragraph_id":"para_153"},{"text":"By its third question, the referring court asks, in essence, whether Article 82(1) of the GDPR must be interpreted as precluding the taking into account of the attitude and motivation of the controller in order, where relevant, to award compensation to the data subject that is lower than the damage he or she has actually suffered.","paragraph_id":"para_154"},{"text":"39","paragraph_id":"para_155"},{"text":"In the first place, it is apparent from Article 83 of the GDPR, read in the light of recital 148 thereof, that criteria relating to the attitude and motivation of the controller should, inter alia, be taken into account, as an ‘aggravating or mitigating factor’, in deciding whether it is appropriate …","paragraph_id":"para_156"},{"text":"40","paragraph_id":"para_157"},{"text":"The absence of any reference to such criteria is justified by the fact that Article 82 of the GDPR fulfils an exclusively compensatory function, in that compensation, in particular financial compensation, based on Article 82 must make it possible to compensate in full the damage suffered, in contras …","paragraph_id":"para_158"},{"text":"41","paragraph_id":"para_159"},{"text":"Thus, in the light of the differences in wording and purpose existing between Article 82 of the GDPR, read in the light of recital 146 thereof, and Article 83 of that regulation, read in the light of recital 148 thereof, it cannot be found that the assessment criteria specifically set out in Article …","paragraph_id":"para_160"},{"text":"42","paragraph_id":"para_161"},{"text":"In the second place, the exclusively compensatory function of the right to compensation provided for in Article 82(1) of the GDPR precludes the taking into account of the severity and possible intentional nature of the infringement of that regulation by the controller for the purposes of compensation for damage under that provision (see, to that effect, judgment of 20 June 2024, Scalable Capital, C‑182/22 and C‑189/22 , EU:C:2024:531 , paragraphs  28 to  30 ).","paragraph_id":"para_162"},{"text":"43","paragraph_id":"para_163"},{"text":"Having regard to the exclusively compensatory, rather than punitive, function fulfilled by that right to compensation, the gravity of such an infringement cannot influence the amount of damages granted under Article 82(1) and that amount cannot be set at a level that exceeds full compensation for th …","paragraph_id":"para_164"},{"text":"44","paragraph_id":"para_165"},{"text":"Likewise, there would be a lack of observance of the exclusively compensatory function of Article 82(1) if the controller’s attitude and motivation were taken into account in order to determine the form of compensation granted on the basis of that provision or in order to award redress that is ‘smaller’ than full compensation for the damage suffered by the data subject, as envisaged by the referring court in the present case.","paragraph_id":"para_166"},{"text":"45","paragraph_id":"para_167"},{"text":"Having regard to the foregoing reasons, the answer to the third question is that Article 82(1) of the GDPR must be interpreted as precluding the taking into account of the attitude and motivation of the controller in order, where relevant, to award compensation to the data subject that is lower than the damage he or she has actually suffered.","paragraph_id":"para_168"},{"text":"Costs","paragraph_id":"para_169"},{"text":"46","paragraph_id":"para_170"},{"text":"Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the referring court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.","paragraph_id":"para_171"},{"text":"On those grounds, the Court (Eighth Chamber) hereby rules:","paragraph_id":"para_172"},{"text":"1.","paragraph_id":"para_173"},{"text":"Article 82(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), read in the light of Article 8(1) of the Charter of Fundamental Rights of the European Union","paragraph_id":"para_174"},{"text":"must be interpreted as meaning that an infringement of the provisions of that regulation is not sufficient, in itself, to constitute ‘damage’ within the meaning of Article 82(1).","paragraph_id":"para_175"},{"text":"2.","paragraph_id":"para_176"},{"text":"Article 82(1) of Regulation 2016/679","paragraph_id":"para_177"},{"text":"must be interpreted as meaning that the making of an apology may constitute sufficient compensation for non-material damage on the basis of that provision, inter alia where it is impossible to restore the situation that existed prior to the occurrence of that damage, provided that that form of redress is such as to compensate in full the damage suffered by the data subject.","paragraph_id":"para_178"},{"text":"3.","paragraph_id":"para_179"},{"text":"Article 82(1) of Regulation 2016/679","paragraph_id":"para_180"},{"text":"must be interpreted as precluding the taking into account of the attitude and motivation of the controller in order, where relevant, to award compensation to the data subject that is lower than the damage he or she has actually suffered.","paragraph_id":"para_181"},{"text":"[Signatures]","paragraph_id":"para_182"},{"text":"(\n *1\n ) Language of the case: Latvian.","paragraph_id":"para_183"}],"word_count":4956,"cites":["C-300/21","C-182/22","C-189/22","C-590/22","C-456/22","C-741/21"],"sha256":"d0480a45be37837e02934e237b0de87b4db6e26068ed4cb67e8bce6b9dff18c6","source_url":"https://publications.europa.eu/resource/celex/62023CJ0507.ENG.xhtml.ECR_62023CJ0507_EN_01.html","fetched_at":"2026-09-30T06:34:33.382+00:00","canonical":"https://legal.exploreworldai.com/ai/judgments/eu/c-507-23","risk_graph":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-507-23","relations_graph":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-507-23","changes":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes","agent":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-507-23","verification":{"stored_sha256":"d0480a45be37837e02934e237b0de87b4db6e26068ed4cb67e8bce6b9dff18c6","recomputed_sha256":"d0480a45be37837e02934e237b0de87b4db6e26068ed4cb67e8bce6b9dff18c6","intact":true,"checked_at":"2026-11-03T03:21:22.315Z"},"verification_scope":{"stored_hash_is_source_verification":false,"official_source_comparison":"not_performed","legal_review":"not_assessed"},"decision_object":{"schema_version":"1","object_id":"decision:eu:c-507-23","judgment_class":"A","operative_part":"not_in_register","cites_count":6,"word_count":4956,"decision_url":null},"agent_links":{"agent_root":"https://legal.exploreworldai.com/agent.json","agent_overview":"https://legal.exploreworldai.com/api/public/rapid/agent/overview"}},"hash":"sha256:11f4888df4a2443a56600071ef06918119e0725f07b8399619ba65a06b9009c7","version":"legal-2026-11-02","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T16:22:18","content_hash":"sha256:11f4888df4a2443a56600071ef06918119e0725f07b8399619ba65a06b9009c7","revalidate_after":"2026-11-03T04:21:22.627Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-507-23","follow":[{"rel":"risk","href":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-507-23"},{"rel":"relations","href":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-507-23"},{"rel":"agent","href":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-507-23"},{"rel":"changes","href":"https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu"}],"disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"withheld":{"item.cited_by":1},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"public","access_view":"public","citation":{"citation_url":"https://legal.exploreworldai.com/eu/praxis/c-507-23","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-1636af9e26d0450a15b3706bef596624","response_hash":"sha256:11f4888df4a2443a56600071ef06918119e0725f07b8399619ba65a06b9009c7"}},"freshness":{"freshness_class":"live","as_of":"2026-11-03T03:21:22.805Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu%3Ac-507-23&verify=1","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":12496}}