{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-667-21", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-667-21)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-19", "fingerprint": "ewai:se:79965a", "proof": "sha256:a801f9a1bb39a7208d4827221a3f7dc05bcc21985dd4f5d069e64f95e5c7779c", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "object_type": "edge", "object_id": "edge:eu:c-667-21", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/edge", "url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-667-21", "judgment": { "id": "eu:c-667-21", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-667-21" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-667-21", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-667-21", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-667-21", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-667-21", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-667-21", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-667-21", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-667-21", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-667-21", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-667-21", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-667-21", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-667-21", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-667-21" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-667-21", "item": { "judgment": "eu:c-667-21", "outgoing": [ { "edge_id": "edge:eu:c-667-21~follows~c-136-17", "type": "follows", "label_sv": "följer", "from": "eu:c-667-21", "to": { "ref": "C-136/17", "id": "eu:c-136-17-62017cj0136", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-136-17-62017cj0136" }, "paragraph_ids": [ "para_254" ], "excerpt": "Those considerations apply even where the data concerned fall within the special categories referred to in Article 9 of that regulation (see, to that effect, judgment of 24 September 2019, GC and Others(De-referencing of sensitive data), C-136/17 , EU:C:2019:773 , paragraphs 57 and 66 to 68 ), such ", "decided": "2023-12-21", "hash": "32d7e252ad707ae3f02de664a9b858518cdda4c1aa34fcabd2dc99cd14fce9b5" }, { "edge_id": "edge:eu:c-667-21~follows~c-204-21", "type": "follows", "label_sv": "följer", "from": "eu:c-667-21", "to": { "ref": "C-204/21", "id": "eu:c-204-21-62021cj0204", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-204-21-62021cj0204" }, "paragraph_ids": [ "para_226" ], "excerpt": "The Court has clarified that the purpose of Article 9(1) of that regulation is to ensure enhanced protection as regards processing which, because of the particular sensitivity of the data processed, is liable to constitute a particularly serious interference with the fundamental rights to respect fo", "decided": "2023-12-21", "hash": "406426405e57dcb5ce6c36e2c07a9f1987551f4a748e2f46b0badd26e74e1c29" }, { "edge_id": "edge:eu:c-667-21~follows~c-300-21", "type": "follows", "label_sv": "följer", "from": "eu:c-667-21", "to": { "ref": "C-300/21", "id": "eu:c-300-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-300-21" }, "paragraph_ids": [ "para_311", "para_313", "para_315", "para_317" ], "excerpt": "The Court has interpreted that provision as meaning that a mere infringement of the GDPR is not sufficient to confer a right to compensation, after pointing out, inter alia, that the existence of ‘damage’ which has been ‘suffered’ constitutes one of the conditions for the right to compensation laid ", "decided": "2023-12-21", "hash": "f2014c373fba3ac2e940cbed6196d18412c7f904ba3eba4240b01e7117ad55c9" }, { "edge_id": "edge:eu:c-667-21~follows~c-34-21", "type": "follows", "label_sv": "följer", "from": "eu:c-667-21", "to": { "ref": "C-34/21", "id": "eu:c-34-21-62021cj0034", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-34-21-62021cj0034" }, "paragraph_ids": [ "para_277" ], "excerpt": "However, any such additional conditions do not derive from the provisions of the GDPR as such but, where applicable, from rules of national law governing processing of that type, in respect of which the regulation expressly leaves a margin of discretion to the Member States (see, to that effect, jud", "decided": "2023-12-21", "hash": "8c8d9f720109034c15e5a5f1560346ebe511f213aa49d663a18c4e6536d19a63" }, { "edge_id": "edge:eu:c-667-21~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-667-21", "to": { "ref": "C-340/21", "id": "eu:c-340-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-340-21" }, "paragraph_ids": [ "para_340", "para_346" ], "excerpt": "The appropriateness of such measures must be assessed in a concrete manner, by assessing whether those measures were implemented by that controller taking into account the various criteria referred to in those articles and the data protection needs specifically inherent in the processing concerned a", "decided": "2023-12-21", "hash": "3cb6ea9d8b7dace8762204dff06179c55b897b6dc4b283a729e6fc85f3671088" }, { "edge_id": "edge:eu:c-667-21~follows~c-579-21", "type": "follows", "label_sv": "följer", "from": "eu:c-667-21", "to": { "ref": "C-579/21", "id": "eu:c-579-21-62021cj0579", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-579-21-62021cj0579" }, "paragraph_ids": [ "para_252" ], "excerpt": "Thus, recital 4 of the GDPR states that the right to the protection of personal data is not an absolute right, since it must be considered in relation to its function in society and be balanced against other fundamental rights, in accordance with the principle of proportionality (see, to that effect", "decided": "2023-12-21", "hash": "1306094e650de4bf294cc6ab6c8045ab3e388e18e08bd50f5f9422ab5ae7386e" }, { "edge_id": "edge:eu:c-667-21~follows~c-597-19", "type": "follows", "label_sv": "följer", "from": "eu:c-667-21", "to": { "ref": "C-597/19", "id": "eu:c-597-19", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-597-19" }, "paragraph_ids": [ "para_252" ], "excerpt": "In addition, the Court has already pointed out that the mechanisms allowing the different rights and interests to be balanced are contained in the GDPR itself (see, to that effect, judgment of 17 June 2021, M.I.C.M., C-597/19 , EU:C:2021:492 , paragraph 112 ).", "decided": "2023-12-21", "hash": "ae601fe51ce5761da19c827c0c0ee0e9220472d916199fdecb9ecfc9c41b208c" }, { "edge_id": "edge:eu:c-667-21~cites~c-252-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-667-21", "to": { "ref": "C-252/21", "id": "eu:c-252-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-252-21" }, "paragraph_ids": [ "para_244", "para_296" ], "excerpt": "First, admittedly, in so far as it provides for an exception to the principle that the processing of special categories of personal data is prohibited, Article 9(2) of the GDPR must be interpreted strictly (judgment of 4 July 2023, Meta Platforms and Others(General terms of use of a social network),", "decided": "2023-12-21", "hash": "c8009cb2f3a5090d48d13c4e7da0e8c45824c5b1570794b89447c8caf04d0588" }, { "edge_id": "edge:eu:c-667-21~cites~c-449-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-667-21", "to": { "ref": "C-449/21", "id": "eu:c-449-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-449-21" }, "paragraph_ids": [ "para_218" ], "excerpt": "The legislative history of a provision of EU law may also reveal elements that are relevant to its interpretation (judgment of 16 March 2023, Towercast, C-449/21 , EU:C:2023:207 , paragraph 31 and the case-law cited).", "decided": "2023-12-21", "hash": "4f2cb4d9886ea115d6208ee843ef0c31bcce2ca16a449cd61fc06faec0c37514" }, { "edge_id": "edge:eu:c-667-21~cites~c-60-22", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-667-21", "to": { "ref": "C-60/22", "id": "eu:c-60-22", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-60-22" }, "paragraph_ids": [ "para_298", "para_300" ], "excerpt": "Therefore, the Court has repeatedly held that any processing of personal data must comply with the principles relating to the processing of data which are set out in Article 5(1) of the GDPR and satisfy the conditions governing lawfulness of the processing which are listed in Article 6 of that regul", "decided": "2023-12-21", "hash": "ff5e0c6d529a83476582f3f35cf8fa89b359316aadc1a58ddd75909714690ba3" } ], "incoming": [ { "edge_id": "edge:eu:c-200-23-62023cj0200~follows~c-667-21", "type": "follows", "label_sv": "följer", "from": "eu:c-200-23-62023cj0200", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-200-23-62023cj0200", "paragraph_ids": [ "para_590", "para_605", "para_607" ], "excerpt": "As the Court has already held, it follows from a combined analysis of Article 82(1) to (3) of the GDPR, the context of that article and the objectives pursued by the EU legislature by means of that regulation that that article provides for fault-based liability in which the burden of proof rests not" }, { "edge_id": "edge:eu:c-446-21~cites~c-667-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-446-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-446-21", "paragraph_ids": [ "para_281" ], "excerpt": "It follows that the fact that the conditions for the application of one of the derogations provided for in Article 9(2) are not met cannot prevent a controller from being able to rely on another derogation referred to in that provision (judgment of 21 December 2023, Krankenversicherung Nordrhein, C-" }, { "edge_id": "edge:eu:c-492-23~follows~c-667-21", "type": "follows", "label_sv": "följer", "from": "eu:c-492-23", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-492-23", "paragraph_ids": [ "para_276", "para_341", "para_363", "para_420" ], "excerpt": "In addition to those principles and conditions, there are specific requirements for sensitive data as defined in Article 9(1) of the GDPR, the processing of which is, in principle, prohibited (see, to that effect, judgment of 21 December 2023, Krankenversicherung Nordrhein, C-667/21 , EU:C:2023:1022" }, { "edge_id": "edge:eu:c-526-24~cites~c-667-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-526-24", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-526-24", "paragraph_ids": [ "para_102" ], "excerpt": "In addition, the Court has already pointed out that the mechanisms allowing the different rights and interests to be balanced are contained in the GDPR itself (judgment of 21 December 2023, Krankenversicherung Nordrhein , C-667/21, EU:C:2023:1022, paragraph 54 and the case-law cited)." }, { "edge_id": "edge:eu:c-590-22~follows~c-667-21", "type": "follows", "label_sv": "följer", "from": "eu:c-590-22", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-590-22", "paragraph_ids": [ "para_169" ], "excerpt": "It follows that the gravity of the infringement of that regulation that caused the alleged material or non-material damage cannot influence the amount of the compensation granted under that provision and that that amount cannot exceed the full compensation for that damage (see, to that effect, judgm" }, { "edge_id": "edge:eu:c-65-23~follows~c-667-21", "type": "follows", "label_sv": "följer", "from": "eu:c-65-23", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-65-23", "paragraph_ids": [ "para_163", "para_208" ], "excerpt": "That Article 9, which governs the processing of special categories of personal data listed therein, appears in Chapter II of that regulation, as is the case with Articles 5 and 6 thereof, the requirements of which can, moreover, be applied concurrently with those arising from that Article 9 (see, to" }, { "edge_id": "edge:eu:c-687-21~follows~c-667-21", "type": "follows", "label_sv": "följer", "from": "eu:c-687-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21", "paragraph_ids": [ "para_205", "para_207", "para_216", "para_218", "para_220", "para_229" ], "excerpt": "The relationship between the rules set out in Article 82 and those set out in Articles 83 and 84 shows that there is a difference between those two categories of provisions, but also complementarity, in terms of encouraging compliance with the GDPR, it being observed that the right of any person to " }, { "edge_id": "edge:eu:c-710-23-62023cj0710~follows~c-667-21", "type": "follows", "label_sv": "följer", "from": "eu:c-710-23-62023cj0710", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-710-23-62023cj0710", "paragraph_ids": [ "para_163" ], "excerpt": "Furthermore, in accordance with the principle of proportionality, Member States must ensure that the practical consequences, in particular of an organisational nature, arising from the additional requirements which they have laid down are not excessive (see, to that effect, judgment of 21 December 2" }, { "edge_id": "edge:eu:c-741-21~follows~c-667-21", "type": "follows", "label_sv": "följer", "from": "eu:c-741-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-741-21", "paragraph_ids": [ "para_185", "para_210", "para_214", "para_216" ], "excerpt": "The Court has already held that it is apparent from a combined analysis of Article 82(2) and (3) that that article provides for a fault-based regime, in which the controller is presumed to have participated in the processing constituting the breach of the GDPR in question, so that the burden of proo" }, { "edge_id": "edge:eu:m-l-c-182-22-och-c-189-22~cites~c-667-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:m-l-c-182-22-och-c-189-22", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:m-l-c-182-22-och-c-189-22", "paragraph_ids": [ "para_127", "para_129" ], "excerpt": "It must, however, be pointed out, first, that the controller’s liability under Article 82 of the GDPR is subject to fault on the part of the controller, which is presupposed unless it proves that it is not in any way responsible for the event giving rise to the damage, and second, that Article 82 do" } ], "acts": [], "counts": { "outgoing": 10, "incoming": 10, "acts": 0 }, "follow": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-667-21?follow=5", "hash": "3caa4e40da9e41c4ee9b8ed34f814298b94beeeb903a6e709dd476cb97583eef" }, "links": { "provisions": null, "case_law": { "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-667-21", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-667-21", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-667-21", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-667-21" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-667-21?view=compact", "representations": { "sv": "https://legal.exploreworldai.com/eu/praxis/c-667-21", "en": "https://legal.exploreworldai.com/en/eu/praxis/c-667-21" }, "machine_languages": [ "en", "sv" ], "ref": "eu:c-667-21" }, "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu", "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.", "recheck_after_seconds": 86400 }, "hash": "sha256:a801f9a1bb39a7208d4827221a3f7dc05bcc21985dd4f5d069e64f95e5c7779c", "version": "legal-2026-10-19", "expires": "2026-10-20T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-19+legal-2026-10-19+2026-10-19T07:35:45", "content_hash": "sha256:a801f9a1bb39a7208d4827221a3f7dc05bcc21985dd4f5d069e64f95e5c7779c", "revalidate_after": "2026-10-19T08:47:56.842Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-667-21", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering", "withheld": { "links.evidence": 3 }, "access": { "status": "partner_key_required", "header": "x-partner-key", "contact": "https://legal.exploreworldai.com/kontakt", "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot." }, "access_class": "relationship", "access_view": "public" }