{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-757-22","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-757-22)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:eu:f6410a","proof":"sha256:23cb0ad1a6bea3ff11c8f8ba09b8be84b102ed3a629d0b04381d4b522ff4f42e","jurisdiction":"eu","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","item":{"schema_version":"1.0.0","id":"eu:c-757-22","jurisdiction":"eu","lang":"en","brand_source":"Source: NovaCopilot","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"sections":[{"title":"62022CJ0757","paragraphs":[]},{"title":"JUDGMENT OF THE COURT (Fourth Chamber)","paragraphs":[]},{"title":"11 July 2024 (\n *1\n )","paragraphs":["para_4","para_5","para_6","para_7","para_8","para_9","para_10","para_11","para_12","para_13","para_14","para_15","para_16","para_17","para_18","para_19","para_20","para_21","para_22","para_23","para_24","para_25","para_26","para_27"]},{"title":"Judgment","paragraphs":[]},{"title":"1","paragraphs":["para_30"]},{"title":"2","paragraphs":["para_32"]},{"title":"Legal context","paragraphs":[]},{"title":"The GDPR","paragraphs":[]},{"title":"3","paragraphs":[]},{"title":"Recitals 10, 13, 39, 58, 60 and 142 of the GDPR state:","paragraphs":["para_37","para_38","para_39"]},{"title":"(13)","paragraphs":["para_41","para_42"]},{"title":"(39)","paragraphs":["para_44","para_45"]},{"title":"(58)","paragraphs":["para_47","para_48"]},{"title":"(60)","paragraphs":["para_50","para_51"]},{"title":"(142)","paragraphs":["para_53"]},{"title":"4","paragraphs":["para_55","para_56"]},{"title":"5","paragraphs":[]},{"title":"Article 4(1), (2), (9) and (11) of that regulation is worded as follows:","paragraphs":["para_59"]},{"title":"(1)","paragraphs":["para_61"]},{"title":"(2)","paragraphs":["para_63","para_64"]},{"title":"(9)","paragraphs":["para_66","para_67"]},{"title":"(11)","paragraphs":["para_69"]},{"title":"6","paragraphs":["para_71","para_72"]},{"title":"(a)","paragraphs":["para_74"]},{"title":"(b)","paragraphs":["para_76","para_77","para_78"]},{"title":"7","paragraphs":["para_80","para_81"]},{"title":"(a)","paragraphs":["para_83"]},{"title":"8","paragraphs":["para_85"]},{"title":"9","paragraphs":["para_87","para_88"]},{"title":"10","paragraphs":["para_90","para_91","para_92"]},{"title":"(c)","paragraphs":["para_94","para_95"]},{"title":"(e)","paragraphs":["para_97"]},{"title":"11","paragraphs":["para_99"]},{"title":"12","paragraphs":["para_101","para_102"]},{"title":"13","paragraphs":["para_104","para_105"]},{"title":"14","paragraphs":["para_107","para_108"]},{"title":"15","paragraphs":["para_110","para_111","para_112"]},{"title":"16","paragraphs":["para_114","para_115"]},{"title":"17","paragraphs":[]},{"title":"Article 84 of the GDPR, entitled ‘Penalties’, states, in paragraph 1:","paragraphs":["para_118"]},{"title":"German law","paragraphs":[]},{"title":"Law on Injunctions","paragraphs":[]},{"title":"18","paragraphs":["para_122","para_123"]},{"title":"(2)   For the purposes of this provision, “consumer-protection laws” means, in particular:","paragraphs":["para_125"]},{"title":"11. the rules defining lawfulness","paragraphs":[]},{"title":"(a)","paragraphs":["para_128"]},{"title":"(b)","paragraphs":["para_130","para_131"]},{"title":"19","paragraphs":["para_133"]},{"title":"Law against unfair competition","paragraphs":[]},{"title":"20","paragraphs":["para_136","para_137"]},{"title":"21","paragraphs":[]},{"title":"Paragraph 3a of the Law against unfair competition is worded as follows:","paragraphs":["para_140"]},{"title":"22","paragraphs":[]},{"title":"Paragraph 8 of that law states:","paragraphs":["para_143","para_144"]},{"title":"(3)   Applications for the injunctions referred to in subparagraph 1 may be made:","paragraphs":["para_146","para_147","para_148"]},{"title":"The Law on Electronic Media","paragraphs":[]},{"title":"23","paragraphs":["para_151"]},{"title":"24","paragraphs":[]},{"title":"Under the first sentence of Paragraph 13(1) of the Law on Electronic Media:","paragraphs":["para_154"]},{"title":"The dispute in the main proceedings and the question referred for a preliminary ruling","paragraphs":[]},{"title":"25","paragraphs":["para_157"]},{"title":"26","paragraphs":["para_159"]},{"title":"27","paragraphs":["para_161"]},{"title":"28","paragraphs":["para_163"]},{"title":"29","paragraphs":["para_165"]},{"title":"30","paragraphs":["para_167"]},{"title":"31","paragraphs":["para_169"]},{"title":"32","paragraphs":["para_171"]},{"title":"33","paragraphs":["para_173"]},{"title":"34","paragraphs":["para_175"]},{"title":"35","paragraphs":["para_177"]},{"title":"36","paragraphs":["para_179"]},{"title":"37","paragraphs":["para_181","para_182"]},{"title":"Consideration of the question referred","paragraphs":[]},{"title":"38","paragraphs":["para_185"]},{"title":"39","paragraphs":["para_187"]},{"title":"40","paragraphs":["para_189"]},{"title":"41","paragraphs":["para_191"]},{"title":"42","paragraphs":["para_193"]},{"title":"43","paragraphs":["para_195"]},{"title":"44","paragraphs":["para_197"]},{"title":"45","paragraphs":["para_199"]},{"title":"46","paragraphs":["para_201"]},{"title":"47","paragraphs":["para_203"]},{"title":"48","paragraphs":["para_205"]},{"title":"49","paragraphs":["para_207"]},{"title":"50","paragraphs":["para_209"]},{"title":"51","paragraphs":["para_211"]},{"title":"52","paragraphs":["para_213"]},{"title":"53","paragraphs":["para_215"]},{"title":"54","paragraphs":["para_217"]},{"title":"55","paragraphs":["para_219"]},{"title":"56","paragraphs":["para_221"]},{"title":"57","paragraphs":["para_223"]},{"title":"58","paragraphs":["para_225"]},{"title":"59","paragraphs":["para_227"]},{"title":"60","paragraphs":["para_229"]},{"title":"61","paragraphs":["para_231"]},{"title":"62","paragraphs":["para_233"]},{"title":"63","paragraphs":["para_235"]},{"title":"64","paragraphs":["para_237"]},{"title":"65","paragraphs":["para_239"]},{"title":"Costs","paragraphs":[]},{"title":"66","paragraphs":["para_242"]},{"title":"On those grounds, the Court (Fourth Chamber) hereby rules:","paragraphs":["para_244","para_245","para_246","para_247"]}],"paragraphs":[{"text":"62022CJ0757","paragraph_id":"para_1"},{"text":"JUDGMENT OF THE COURT (Fourth Chamber)","paragraph_id":"para_2"},{"text":"11 July 2024 (\n *1\n )","paragraph_id":"para_3"},{"text":"(Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – First sentence of Article 12(1) – Transparency of information – Article 13(1)(c) and (e) – Obligation of the controller to provide information – Article 80( …","paragraph_id":"para_4"},{"text":"In Case C‑757/22,","paragraph_id":"para_5"},{"text":"REQUEST for a preliminary ruling under Article 267 TFEU from the Bundesgerichtshof (Federal Court of Justice, Germany), made by decision of 10 November 2022, received at the Court on 15 December 2022, in the proceedings","paragraph_id":"para_6"},{"text":"Meta Platforms Ireland Ltd , formerly Facebook Ireland Ltd,","paragraph_id":"para_7"},{"text":"v","paragraph_id":"para_8"},{"text":"Bundesverband der Verbraucherzentralen und Verbraucherverbände – Verbraucherzentrale Bundesverband eV,","paragraph_id":"para_9"},{"text":"THE COURT (Fourth Chamber),","paragraph_id":"para_10"},{"text":"composed of C. Lycourgos, President of the Chamber, O. Spineanu-Matei, J.-C. Bonichot, S. Rodin and L.S. Rossi (Rapporteur), Judges,","paragraph_id":"para_11"},{"text":"Advocate General: J. Richard de la Tour,","paragraph_id":"para_12"},{"text":"Registrar: D. Dittert, Head of Unit,","paragraph_id":"para_13"},{"text":"having regard to the written procedure and further to the hearing on 23 November 2023,","paragraph_id":"para_14"},{"text":"after considering the observations submitted on behalf of:","paragraph_id":"para_15"},{"text":"–","paragraph_id":"para_16"},{"text":"Meta Platforms Ireland Ltd, by M. Braun, H.-G. Kamann, and V. Wettner, Rechtsanwälte,","paragraph_id":"para_17"},{"text":"–","paragraph_id":"para_18"},{"text":"Bundesverband der Verbraucherzentralen und Verbraucherverbände – Verbraucherzentrale Bundesverband eV, by P. Wassermann, Rechtsanwalt,","paragraph_id":"para_19"},{"text":"–","paragraph_id":"para_20"},{"text":"the German Government, by J. Möller and P.-L. Krüger, acting as Agents,","paragraph_id":"para_21"},{"text":"–","paragraph_id":"para_22"},{"text":"the Portuguese Government, by P. Barros da Costa, J. Ramos and C. Vieira Guerra, acting as Agents,","paragraph_id":"para_23"},{"text":"–","paragraph_id":"para_24"},{"text":"the European Commission, by A. Bouchagiar, F. Erlbacher and H. Kranenborg, acting as Agents,","paragraph_id":"para_25"},{"text":"after hearing the Opinion of the Advocate General at the sitting on 25 January 2024,","paragraph_id":"para_26"},{"text":"gives the following","paragraph_id":"para_27"},{"text":"Judgment","paragraph_id":"para_28"},{"text":"1","paragraph_id":"para_29"},{"text":"This request for a preliminary ruling concerns the interpretation of Article 80(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and …","paragraph_id":"para_30"},{"text":"2","paragraph_id":"para_31"},{"text":"The request has been made in proceedings between Meta Platforms Ireland Ltd, formerly Facebook Ireland Ltd, whose registered office is in Ireland, and Bundesverband der Verbraucherzentralen und Verbraucherverbände – Verbraucherzentrale Bundesverband eV (Federal Union of Consumer Organisations and As …","paragraph_id":"para_32"},{"text":"Legal context","paragraph_id":"para_33"},{"text":"The GDPR","paragraph_id":"para_34"},{"text":"3","paragraph_id":"para_35"},{"text":"Recitals 10, 13, 39, 58, 60 and 142 of the GDPR state:","paragraph_id":"para_36"},{"text":"‘(10)","paragraph_id":"para_37"},{"text":"In order to ensure a consistent and high level of protection of natural persons and to remove the obstacles to flows of personal data within the [European] Union, the level of protection of the rights and freedoms of natural persons with regard to the processing of such data should be equivalent in …","paragraph_id":"para_38"},{"text":"…","paragraph_id":"para_39"},{"text":"(13)","paragraph_id":"para_40"},{"text":"In order to ensure a consistent level of protection for natural persons throughout the Union and to prevent divergences hampering the free movement of personal data within the internal market, a Regulation is necessary to provide legal certainty and transparency for economic operators, including mic …","paragraph_id":"para_41"},{"text":"…","paragraph_id":"para_42"},{"text":"(39)","paragraph_id":"para_43"},{"text":"Any processing of personal data should be lawful and fair. It should be transparent to natural persons that personal data concerning them are collected, used, consulted or otherwise processed and to what extent the personal data are or will be processed. The principle of transparency requires that a …","paragraph_id":"para_44"},{"text":"…","paragraph_id":"para_45"},{"text":"(58)","paragraph_id":"para_46"},{"text":"The principle of transparency requires that any information addressed to the public or to the data subject be concise, easily accessible and easy to understand, and that clear and plain language and, additionally, where appropriate, visualisation be used. Such information could be provided in electr …","paragraph_id":"para_47"},{"text":"…","paragraph_id":"para_48"},{"text":"(60)","paragraph_id":"para_49"},{"text":"The principles of fair and transparent processing require that the data subject be informed of the existence of the processing operation and its purposes. The controller should provide the data subject with any further information necessary to ensure fair and transparent processing taking into account the specific circumstances and context in which the personal data are processed. …","paragraph_id":"para_50"},{"text":"…","paragraph_id":"para_51"},{"text":"(142)","paragraph_id":"para_52"},{"text":"Where a data subject considers that his or her rights under this Regulation are infringed, he or she should have the right to mandate a not-for-profit body, organisation or association which is constituted in accordance with the law of a Member State, has statutory objectives which are in the public …","paragraph_id":"para_53"},{"text":"4","paragraph_id":"para_54"},{"text":"Article 1 of that regulation, entitled ‘Subject matter and objectives’, provides, in paragraph 1 thereof:","paragraph_id":"para_55"},{"text":"‘This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data.’","paragraph_id":"para_56"},{"text":"5","paragraph_id":"para_57"},{"text":"Article 4(1), (2), (9) and (11) of that regulation is worded as follows:","paragraph_id":"para_58"},{"text":"‘For the purposes of this Regulation:","paragraph_id":"para_59"},{"text":"(1)","paragraph_id":"para_60"},{"text":"“personal data” means any information relating to an identified or identifiable natural person (“data subject”); …","paragraph_id":"para_61"},{"text":"(2)","paragraph_id":"para_62"},{"text":"“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;","paragraph_id":"para_63"},{"text":"…","paragraph_id":"para_64"},{"text":"(9)","paragraph_id":"para_65"},{"text":"“recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. …","paragraph_id":"para_66"},{"text":"…","paragraph_id":"para_67"},{"text":"(11)","paragraph_id":"para_68"},{"text":"“consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her’.","paragraph_id":"para_69"},{"text":"6","paragraph_id":"para_70"},{"text":"Article 5 of the GDPR, entitled ‘Principles relating to processing of personal data’ provides:","paragraph_id":"para_71"},{"text":"‘1.   Personal data shall be:","paragraph_id":"para_72"},{"text":"(a)","paragraph_id":"para_73"},{"text":"processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”);","paragraph_id":"para_74"},{"text":"(b)","paragraph_id":"para_75"},{"text":"collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; …","paragraph_id":"para_76"},{"text":"…","paragraph_id":"para_77"},{"text":"2.   The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (“accountability”).’","paragraph_id":"para_78"},{"text":"7","paragraph_id":"para_79"},{"text":"Article 6 of the GDPR, entitled ‘Lawfulness of processing’, provides in paragraph 1, point (a):","paragraph_id":"para_80"},{"text":"‘Processing shall be lawful only if and to the extent that at least one of the following applies:","paragraph_id":"para_81"},{"text":"(a)","paragraph_id":"para_82"},{"text":"the data subject has given consent to the processing of his or her personal data for one or more specific purposes’.","paragraph_id":"para_83"},{"text":"8","paragraph_id":"para_84"},{"text":"Chapter III of the GDPR, which includes Articles 12 to 23, is entitled ‘Rights of the data subject’.","paragraph_id":"para_85"},{"text":"9","paragraph_id":"para_86"},{"text":"Article 12 of that regulation, entitled ‘Transparent information, communication and modalities for the exercise of the rights of the data subject’, states, in paragraph 1:","paragraph_id":"para_87"},{"text":"‘The controller shall take appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34 relating to processing to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain langu …","paragraph_id":"para_88"},{"text":"10","paragraph_id":"para_89"},{"text":"Article 13 of that regulation, entitled ‘Information to be provided where personal data are collected from the data subject’, provides, in paragraph 1(c) and (e):","paragraph_id":"para_90"},{"text":"‘Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information:","paragraph_id":"para_91"},{"text":"…","paragraph_id":"para_92"},{"text":"(c)","paragraph_id":"para_93"},{"text":"the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;","paragraph_id":"para_94"},{"text":"…","paragraph_id":"para_95"},{"text":"(e)","paragraph_id":"para_96"},{"text":"the recipients or categories of recipients of the personal data, if any’.","paragraph_id":"para_97"},{"text":"11","paragraph_id":"para_98"},{"text":"Chapter VIII of that regulation, which contains Articles 77 to 84, is entitled ‘Remedies, liability and penalties’.","paragraph_id":"para_99"},{"text":"12","paragraph_id":"para_100"},{"text":"Article 77 of the GDPR, entitled ‘Right to lodge a complaint with a supervisory authority’, provides, in paragraph 1:","paragraph_id":"para_101"},{"text":"‘Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.’","paragraph_id":"para_102"},{"text":"13","paragraph_id":"para_103"},{"text":"Article 78 of that regulation, entitled ‘Right to an effective judicial remedy against a supervisory authority’, provides, in paragraph 1:","paragraph_id":"para_104"},{"text":"‘Without prejudice to any other administrative or non-judicial remedy, each natural or legal person shall have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning them.’","paragraph_id":"para_105"},{"text":"14","paragraph_id":"para_106"},{"text":"Article 79 of that regulation, entitled ‘Right to an effective judicial remedy against a controller or processor’, provides, in paragraph 1:","paragraph_id":"para_107"},{"text":"‘Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation.’","paragraph_id":"para_108"},{"text":"15","paragraph_id":"para_109"},{"text":"Article 80 of that regulation, entitled ‘Representation of data subjects’, is worded as follows:","paragraph_id":"para_110"},{"text":"‘1.   The data subject shall have the right to mandate a not-for-profit body, organisation or association which has been properly constituted in accordance with the law of a Member State, has statutory objectives which are in the public interest, and is active in the field of the protection of data …","paragraph_id":"para_111"},{"text":"2.   Member States may provide that any body, organisation or association referred to in paragraph 1 of this Article, independently of a data subject's mandate, has the right to lodge, in that Member State, a complaint with the supervisory authority which is competent pursuant to Article 77 and to exercise the rights referred to in Articles 78 and 79 if it considers that the rights of a data subject under this Regulation have been infringed as a result of the processing.’","paragraph_id":"para_112"},{"text":"16","paragraph_id":"para_113"},{"text":"Article 82 of the GDPR, entitled ‘Right to compensation and liability’, provides, in paragraph 1:","paragraph_id":"para_114"},{"text":"‘Any person who has suffered material or non-material damage as a result of an infringement of this Regulation shall have the right to receive compensation from the controller or processor for the damage suffered.’","paragraph_id":"para_115"},{"text":"17","paragraph_id":"para_116"},{"text":"Article 84 of the GDPR, entitled ‘Penalties’, states, in paragraph 1:","paragraph_id":"para_117"},{"text":"‘Member States shall lay down the rules on other penalties applicable to infringements of this Regulation in particular for infringements which are not subject to administrative fines pursuant to Article 83, and shall take all measures necessary to ensure that they are implemented. Such penalties shall be effective, proportionate and dissuasive.’","paragraph_id":"para_118"},{"text":"German law","paragraph_id":"para_119"},{"text":"Law on Injunctions","paragraph_id":"para_120"},{"text":"18","paragraph_id":"para_121"},{"text":"Under Paragraph 2 of the Gesetz über Unterlassungsklagen bei Verbraucherrechts- und anderen Verstößen (Unterlassungsklagengesetz – UKlaG) (Law on injunctions against infringements of consumer law and other infringements) of 26 November 2001 (BGBl. 2001 I, p. 3138), in the version applicable to the dispute in the main proceedings (‘the Law on Injunctions’):","paragraph_id":"para_122"},{"text":"‘(1)   Any person who infringes rules in place to protect consumers (consumer protection laws), other than in the application or recommendation of general terms and conditions, may be subject to an order to cease and desist and a prohibition order in the interest of consumer protection. …","paragraph_id":"para_123"},{"text":"(2)   For the purposes of this provision, “consumer-protection laws” means, in particular:","paragraph_id":"para_124"},{"text":"…","paragraph_id":"para_125"},{"text":"11. the rules defining lawfulness","paragraph_id":"para_126"},{"text":"(a)","paragraph_id":"para_127"},{"text":"of the collection of personal data of a consumer by an undertaking or","paragraph_id":"para_128"},{"text":"(b)","paragraph_id":"para_129"},{"text":"the processing or use of personal data which have been collected by a business in relation to a consumer,","paragraph_id":"para_130"},{"text":"where the data are collected, processed or used for purposes of advertising, market and opinion research, use by an information agency, a personality and usage profile establishment, of any other data business or for similar commercial purposes.’","paragraph_id":"para_131"},{"text":"19","paragraph_id":"para_132"},{"text":"The Bundesgerichtshof (Federal Court of Justice, Germany) states that, under point 1 of the first sentence of Paragraph 3(1) of the Law on Injunctions, bodies with standing to bring proceedings, within the meaning of Paragraph 4 of that law, may, first, in accordance with Paragraph 1 of that law, se …","paragraph_id":"para_133"},{"text":"Law against unfair competition","paragraph_id":"para_134"},{"text":"20","paragraph_id":"para_135"},{"text":"Paragraph 3(1) of the Gesetz gegen den unlauteren Wettbewerb (Law against unfair competition) of 3 July 2004 (BGB1. 2004 I, p. 1414), in the version applicable to the main proceedings (‘the Law against unfair competition’), provides:","paragraph_id":"para_136"},{"text":"‘Unfair commercial practices shall be prohibited.’","paragraph_id":"para_137"},{"text":"21","paragraph_id":"para_138"},{"text":"Paragraph 3a of the Law against unfair competition is worded as follows:","paragraph_id":"para_139"},{"text":"‘A person shall be considered to be acting unfairly where he or she infringes a statutory provision that is also intended to regulate market behaviour in the interests of market participants and the infringement is liable to have a significantly adverse effect on the interests of consumers, other market participants or competitors.’","paragraph_id":"para_140"},{"text":"22","paragraph_id":"para_141"},{"text":"Paragraph 8 of that law states:","paragraph_id":"para_142"},{"text":"‘(1)   Any commercial practice which is unlawful under Paragraph 3 or Paragraph 7 may give rise to an order to cease and desist and, in the event of recurrence, an order to refrain or a prohibition order. …","paragraph_id":"para_143"},{"text":"…","paragraph_id":"para_144"},{"text":"(3)   Applications for the injunctions referred to in subparagraph 1 may be made:","paragraph_id":"para_145"},{"text":"…","paragraph_id":"para_146"},{"text":"3.","paragraph_id":"para_147"},{"text":"by qualified entities which provide evidence that they are included in the list of qualified entities, in accordance with Paragraph 4 of the [Law on injunctions] …’","paragraph_id":"para_148"},{"text":"The Law on Electronic Media","paragraph_id":"para_149"},{"text":"23","paragraph_id":"para_150"},{"text":"The Bundesgerichtshof (Federal Court of Justice) states that Paragraph 13(1) of the Telemediengesetz (‘the Law on Electronic Media’) of 26 February 2007 (BGB1. 2007 I, p. 179) was applicable until the GDPR came into force. As from that date, that provision has been replaced by Articles 12 to 14 of that regulation.","paragraph_id":"para_151"},{"text":"24","paragraph_id":"para_152"},{"text":"Under the first sentence of Paragraph 13(1) of the Law on Electronic Media:","paragraph_id":"para_153"},{"text":"‘From the outset of the use, the service provider shall inform the user in a universally comprehensible form of the mode, the extent and the purpose of the collection and use of personal data and of the processing of his or her data in States which do not come within the scope of Directive 95/46/EC …","paragraph_id":"para_154"},{"text":"The dispute in the main proceedings and the question referred for a preliminary ruling","paragraph_id":"para_155"},{"text":"25","paragraph_id":"para_156"},{"text":"Meta Platforms Ireland, which manages the provision of services of the online social network Facebook in the European Union, is the controller of the personal data of users of that social network in the European Union. Facebook Germany GmbH, which has its registered office in Germany, promotes the s …","paragraph_id":"para_157"},{"text":"26","paragraph_id":"para_158"},{"text":"The Federal Union, a body which has standing under Paragraph 4 of the Law on Injunctions, considered that the information provided by the games applications concerned in the App Center was unfair, in particular in terms of the failure to comply with the legal requirements to obtain valid consent fro …","paragraph_id":"para_159"},{"text":"27","paragraph_id":"para_160"},{"text":"In that context, the Federal Union brought an action for an injunction before the Landgericht Berlin (Regional Court, Berlin, Germany), based on Paragraph 3a of the Law against unfair competition, first sentence, point 11 of Paragraph 2(2) of the Law on Injunctions and the Civil Code, seeking to pro …","paragraph_id":"para_161"},{"text":"28","paragraph_id":"para_162"},{"text":"The Landgericht Berlin (Regional Court, Berlin) upheld the form of order sought by the Federal Union. The appeal brought by Meta Platforms Ireland before the Kammergericht Berlin (Higher Regional Court, Berlin, Germany) was dismissed. Meta Platforms Ireland then brought an appeal on a point of law ( Revision ) before the referring court against the dismissal decision adopted by the Kammergericht Berlin (Higher Regional Court, Berlin).","paragraph_id":"para_163"},{"text":"29","paragraph_id":"para_164"},{"text":"The referring court considered that the action brought by the Federal Union was well founded, in so far as Meta Platforms Ireland had infringed Paragraph 3a of the Law against unfair competition and Paragraph 2(2), first sentence, point 11, of the Law on Injunctions and had used an invalid general term or condition, within the meaning of Paragraph 1 of the Law on Injunctions.","paragraph_id":"para_165"},{"text":"30","paragraph_id":"para_166"},{"text":"However, that court had doubts as to the admissibility of the action brought by the Federal Union. It considered that it could not be ruled out that the Federal Union, which did indeed have standing to bring proceedings on the date on which it brought the action – on the basis of Paragraph 8(3) of t …","paragraph_id":"para_167"},{"text":"31","paragraph_id":"para_168"},{"text":"Thus, by decision of 28 May 2020, the Bundesgerichtshof (Federal Court of Justice) decided to stay the proceedings and to refer a question to the Court of Justice for a preliminary ruling on the interpretation of Article 80(1) and (2) and Article 84(1) of the GDPR.","paragraph_id":"para_169"},{"text":"32","paragraph_id":"para_170"},{"text":"By its judgment of 28 April 2022, Meta Platforms Ireland ( C‑319/20 , EU:C:2022:322 ) the Court answered that question to the effect that Article 80(2) of the GDPR must be interpreted as not precluding national legislation which allows a consumer protection association to bring legal proceedings, in …","paragraph_id":"para_171"},{"text":"33","paragraph_id":"para_172"},{"text":"In the light of that judgment, the referring court considers that an entity’s standing within the meaning of Article 80(2) of the GDPR is not subject to a requirement that such an entity carry out a prior individual identification of the subject of a data processing operation that is allegedly contr …","paragraph_id":"para_173"},{"text":"34","paragraph_id":"para_174"},{"text":"However, according to the referring court, the abovementioned judgment of the Court of Justice did not examine the condition laid down in Article 80(2) of the GDPR, according to which, in order to make use of the remedies provided for by that regulation, a consumer protection association must consider that the rights of a data subject provided for in that regulation have been infringed ‘as a result of the processing’.","paragraph_id":"para_175"},{"text":"35","paragraph_id":"para_176"},{"text":"First, the referring court considers that it is not clear from that judgment whether an infringement of the obligation under the first sentence of Article 12(1) and Article 13(1)(c) and (e) of the GDPR to provide the data subject, in a concise, transparent, intelligible and easily accessible form, u …","paragraph_id":"para_177"},{"text":"36","paragraph_id":"para_178"},{"text":"Second, that court considers that it is not clearly established whether, in a situation such as that in the present case, the infringement of the information obligation occurred ‘as a result of’ the processing of personal data within the meaning of Article 80(2) of the GDPR. In that regard, it point …","paragraph_id":"para_179"},{"text":"37","paragraph_id":"para_180"},{"text":"In those circumstances, the Bundesgerichtshof (Federal Court of Justice) decided to stay the proceedings and to refer the following question to the Court of Justice for a preliminary ruling:","paragraph_id":"para_181"},{"text":"‘Is an infringement of [the rights of a data subject] “as a result of the processing” within the meaning of Article 80(2) of the GDPR asserted when a consumer protection association invokes, in support of its action, infringement of a data subject’s rights on the ground of non-compliance with the in …","paragraph_id":"para_182"},{"text":"Consideration of the question referred","paragraph_id":"para_183"},{"text":"38","paragraph_id":"para_184"},{"text":"By its question, the referring court asks, in essence, whether Article 80(2) of the GDPR must be interpreted as meaning that the condition that an authorised entity, in order to be able to bring a representative action under that provision, must assert that it considers the rights of a subject of a …","paragraph_id":"para_185"},{"text":"39","paragraph_id":"para_186"},{"text":"In order to answer this question, it is important, as a preliminary point, to recall that the GDPR governs, inter alia, the legal remedies enabling the protection of the data subject’s rights where his or her personal data have been the subject of processing that is allegedly contrary to the provisi …","paragraph_id":"para_187"},{"text":"40","paragraph_id":"para_188"},{"text":"In particular, Article 80(2) of the GDPR allows Member States to provide for a representative action mechanism against the person allegedly responsible for an infringement of the laws protecting personal data, in the absence of a mandate from the data subject, while setting out a number of requireme …","paragraph_id":"para_189"},{"text":"41","paragraph_id":"para_190"},{"text":"In that respect, as regards, in the first place, the personal scope of that mechanism, standing to bring proceedings is conferred on a body, organisation or association which meets the criteria set out in Article 80(1) of the GDPR. In particular, as the Court has already held, a consumer protection …","paragraph_id":"para_191"},{"text":"42","paragraph_id":"para_192"},{"text":"As regards, in the second place, the material scope of that mechanism, the exercise of the representative action provided for in Article 80(2) of the GDPR by an entity meeting the conditions referred to in paragraph 1 of that article presupposes that that entity, independently of any mandate conferr …","paragraph_id":"para_193"},{"text":"43","paragraph_id":"para_194"},{"text":"In that regard, the Court has clarified that the bringing of a representative action is not, in particular, subject to the existence of a ‘specific infringement’ of the rights which a person derives from the personal data protection rules, with the result that, in order to recognise that such an ent …","paragraph_id":"para_195"},{"text":"44","paragraph_id":"para_196"},{"text":"Thus, as the Court has already held, the lodging of a representative action presupposes that the entity concerned ‘considers’ that the rights of a data subject laid down in that regulation have been infringed as a result of the processing of his or her personal data and therefore alleges the existen …","paragraph_id":"para_197"},{"text":"45","paragraph_id":"para_198"},{"text":"Specifically, as is apparent from the wording of Article 80(2) of the GDPR, the bringing of a representative action on the basis of that provision implies that the infringement of the rights which the data subject derives from that regulation occurs in the course of the processing of personal data.","paragraph_id":"para_199"},{"text":"46","paragraph_id":"para_200"},{"text":"That interpretation is supported by a comparison of the different language versions of Article 80(2) of the GDPR and by recital 142 thereof, which states that entities meeting the conditions referred to in Article 80(1) of that regulation must have reasons to consider that the rights of a data subject under that regulation have been infringed as a result of ‘the processing of personal data which infringes [that] Regulation’.","paragraph_id":"para_201"},{"text":"47","paragraph_id":"para_202"},{"text":"Having clarified that, in order to answer the question referred for a preliminary ruling, it is still necessary to ascertain whether the infringement of the controller’s obligation under the first sentence of Article 12(1) and Article 13(1)(c) and (e) of the GDPR to provide the data subject, in a co …","paragraph_id":"para_203"},{"text":"48","paragraph_id":"para_204"},{"text":"As a preliminary point, it should be borne in mind that the objective pursued by the GDPR, as is set out in Article 1 and recital 10 thereof, consists, inter alia, in ensuring a high level of protection of the fundamental rights and freedoms of natural persons, in particular their right to privacy with respect to the processing of personal data (see, to that effect, judgment of 7 March 2024, IAB Europe, C‑604/22 , EU:C:2024:214 , paragraph  53 ).","paragraph_id":"para_205"},{"text":"49","paragraph_id":"para_206"},{"text":"To that end, Chapters II and III of that regulation set out the principles governing the processing of personal data and the rights of the data subject that any processing of personal data must observe, respectively. In particular, subject to the exceptions provided for in Article 23 of that regulat …","paragraph_id":"para_207"},{"text":"50","paragraph_id":"para_208"},{"text":"In that regard, it should be noted that, under Article 5(1)(a) of the GDPR, personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject. Furthermore, in accordance with point (b) of Article 5(1), such data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.","paragraph_id":"para_209"},{"text":"51","paragraph_id":"para_210"},{"text":"As regards the interpretation of Article 5(1)(b) of the GDPR, the Court has held that that provision requires, inter alia, that the purposes of the processing be stated clearly and identified, at the latest, when personal data are collected (judgment of 24 February 2022, Valsts ieņēmumu dienests (Processing of personal data for tax purposes), C‑175/20 , EU:C:2022:124 , paragraphs  64 and  65 ).","paragraph_id":"para_211"},{"text":"52","paragraph_id":"para_212"},{"text":"Furthermore, in accordance with Article 5(2) of the GDPR, it is for the controller to prove that those data are collected for specified, explicit and legitimate purposes and that they are processed lawfully, fairly and in a transparent manner in relation to the data subject.","paragraph_id":"para_213"},{"text":"53","paragraph_id":"para_214"},{"text":"It therefore follows from Article 5 of the GDPR that the processing of personal data must, inter alia, satisfy specific requirements of transparency with regard to the data subject concerned by such processing. To that end, in Chapter III, the GDPR, first, lays down precise obligations for the contr …","paragraph_id":"para_215"},{"text":"54","paragraph_id":"para_216"},{"text":"In particular, Article 13(1)(c) and (e) of the GDPR imposes an obligation on the controller, where personal data are collected from the data subject, to inform the data subject of the purposes of the processing for which those data are intended along with the legal basis for that processing and of the recipients or categories of recipients of those data, respectively.","paragraph_id":"para_217"},{"text":"55","paragraph_id":"para_218"},{"text":"In addition, Article 12(1) of that regulation requires the controller to take appropriate measures to ensure, inter alia, that the information referred to in the preceding paragraph with which the data subject is provided is concise, transparent, comprehensible, easily accessible, and formulated in clear and plain language.","paragraph_id":"para_219"},{"text":"56","paragraph_id":"para_220"},{"text":"As the Court has held, the purpose of Article 12(1) of the GDPR, which is an expression of the principle of transparency, is to ensure that the data subject is able fully to understand the information sent to him or her (judgment of 4 May 2023, Österreichische Datenschutzbehörde and CRIF, C‑487/21 , EU:C:2023:369 , paragraph  38 ).","paragraph_id":"para_221"},{"text":"57","paragraph_id":"para_222"},{"text":"The importance of compliance with such an information obligation is also confirmed by recital 60 of the GDPR, which states that the principles of fair and transparent processing require that the data subject be informed of the existence of the processing operation and its purposes, it being stressed …","paragraph_id":"para_223"},{"text":"58","paragraph_id":"para_224"},{"text":"It follows from the foregoing, in the first place, that the controller’s obligation to provide information to subjects of the processing of personal data is the corollary of the right to information which is conferred on those data subjects by Articles 12 and 13 of the GDPR and which thus forms part …","paragraph_id":"para_225"},{"text":"59","paragraph_id":"para_226"},{"text":"In the second place, as the Advocate General noted in point 47 of his Opinion, the alleged infringement of the data subjects’ right to be sufficiently informed of all the circumstances surrounding processing of personal data, in particular the purpose of that processing and the recipient of those da …","paragraph_id":"para_227"},{"text":"60","paragraph_id":"para_228"},{"text":"The validity of the consent given by the data subject depends, inter alia, on whether that person has previously obtained the information in the light of all the circumstances surrounding the processing of the data in question to which he or she was entitled, under Article 12 and 13 of the GDPR, and which allow him or her to give consent in full knowledge of the facts.","paragraph_id":"para_229"},{"text":"61","paragraph_id":"para_230"},{"text":"In so far as processing of personal data carried out in breach of the data subject’s right to information under Articles 12 and 13 of the GDPR infringes the requirements laid down in Article 5 of that regulation, the infringement of that right to information must be regarded as an infringement of the data subject’s rights ‘as a result of the processing’, within the meaning of Article 80(2) of that regulation.","paragraph_id":"para_231"},{"text":"62","paragraph_id":"para_232"},{"text":"It follows that the right of the subject of a personal data processing operation, under the first sentence of Article 12(1) and Article 13(1)(c) and (e) of the GDPR, to obtain from the controller, in a concise, transparent, intelligible and easily accessible form, using clear and plain language, inf …","paragraph_id":"para_233"},{"text":"63","paragraph_id":"para_234"},{"text":"That interpretation is confirmed, first, by the objective of the GDPR, recalled in paragraph 48 above, of ensuring effective protection of the fundamental rights and freedoms of natural persons and, in particular, a high level of protection of the right of every person to privacy with respect to the processing of personal data concerning him or her.","paragraph_id":"para_235"},{"text":"64","paragraph_id":"para_236"},{"text":"Second, such an interpretation is also consistent with the preventive function of the representative action provided for in Article 80(2) of the GDPR carried out by consumer protection associations, such as, in the present case, the Federal Union (judgment of 28 April 2022, Meta Platforms Ireland, C‑319/20 , EU:C:2022:322 , paragraph  76 ).","paragraph_id":"para_237"},{"text":"65","paragraph_id":"para_238"},{"text":"In the light of the foregoing, the answer to the question referred for a preliminary ruling is that Article 80(2) of the GDPR must be interpreted as meaning that the condition that an authorised entity, in order to be able to bring a representative action under that provision, must assert that it co …","paragraph_id":"para_239"},{"text":"Costs","paragraph_id":"para_240"},{"text":"66","paragraph_id":"para_241"},{"text":"Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the referring court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.","paragraph_id":"para_242"},{"text":"On those grounds, the Court (Fourth Chamber) hereby rules:","paragraph_id":"para_243"},{"text":"Article 80(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)","paragraph_id":"para_244"},{"text":"must be interpreted as meaning that the condition that an authorised entity, in order to be able to bring a representative action under that provision, must assert that it considers the rights of a data subject provided for in that regulation to have been infringed ‘as a result of the processing’, w …","paragraph_id":"para_245"},{"text":"[Signatures]","paragraph_id":"para_246"},{"text":"(\n *1\n ) Language of the case: German.","paragraph_id":"para_247"}],"word_count":7356,"cites":["C-319/20","C-604/22","C-511/18","C-512/18","C-520/18","C-175/20","C-579/21","C-487/21"],"sha256":"36afc2e87e0482f91eea41b1d3f8563197905f38a7dae32a991ece6e8b3a099a","source_url":"https://publications.europa.eu/resource/celex/62022CJ0757.ENG.xhtml.ECR_62022CJ0757_EN_01.html","fetched_at":"2026-10-02T15:58:24.39+00:00","canonical":"https://legal.exploreworldai.com/ai/judgments/eu/c-757-22","risk_graph":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-757-22","relations_graph":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-757-22","changes":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes","agent":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-757-22","verification":{"stored_sha256":"36afc2e87e0482f91eea41b1d3f8563197905f38a7dae32a991ece6e8b3a099a","recomputed_sha256":"36afc2e87e0482f91eea41b1d3f8563197905f38a7dae32a991ece6e8b3a099a","intact":true,"checked_at":"2026-11-03T03:18:30.625Z"},"verification_scope":{"stored_hash_is_source_verification":false,"official_source_comparison":"not_performed","legal_review":"not_assessed"},"decision_object":{"schema_version":"1","object_id":"decision:eu:c-757-22","judgment_class":"A","operative_part":"not_in_register","cites_count":8,"word_count":7356,"decision_url":null},"agent_links":{"agent_root":"https://legal.exploreworldai.com/agent.json","agent_overview":"https://legal.exploreworldai.com/api/public/rapid/agent/overview"}},"hash":"sha256:23cb0ad1a6bea3ff11c8f8ba09b8be84b102ed3a629d0b04381d4b522ff4f42e","version":"legal-2026-11-02","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T16:22:18","content_hash":"sha256:23cb0ad1a6bea3ff11c8f8ba09b8be84b102ed3a629d0b04381d4b522ff4f42e","revalidate_after":"2026-11-03T04:18:30.962Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-757-22","follow":[{"rel":"risk","href":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-757-22"},{"rel":"relations","href":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-757-22"},{"rel":"agent","href":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-757-22"},{"rel":"changes","href":"https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu"}],"disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"withheld":{"item.cited_by":6},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"public","access_view":"public","citation":{"citation_url":"https://legal.exploreworldai.com/eu/praxis/c-757-22","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-10f51d5ded7f8a26ea9bf923a9b9b34a","response_hash":"sha256:23cb0ad1a6bea3ff11c8f8ba09b8be84b102ed3a629d0b04381d4b522ff4f42e"}},"freshness":{"freshness_class":"live","as_of":"2026-11-03T03:18:31.564Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu%3Ac-757-22&verify=1","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":16209}}