{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-25", "fingerprint": "ewai:se:ae117c", "proof": "sha256:72a79fdc31b9f3d0bbfb9098626e0eb17dc7336c1b3f3ca5bafa044e1b12c401", "jurisdiction": "se", "lang": "en" }, "brand_source": "Source: NovaCopilot", "object_type": "precedent", "object_id": "precedent:eu:c-687-21", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/precedent", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21", "judgment": { "id": "eu:c-687-21", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-687-21" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-687-21", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-687-21", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-687-21", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-687-21", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-687-21", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-687-21", "edge": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-687-21", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-687-21", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-687-21", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-687-21", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-687-21", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-687-21" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-687-21", "item": { "judgment": "eu:c-687-21", "issue": "Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Interpretation of Articles 5, 24, 32 and 82 – Assessment of the validity of Article 82 – Inadmissibility of the request for an assessment of validity – Right to compensation for damage caused by data processing which infringes that regulation – Transmission of data to an unauthorised third party on account of an error made by the employees of the controller – Assessment of the appropriateness of the protection measures implemented by the controller – Compensatory function fulfilled by the right to compensation – Effect of the severity of the infringement – Whether necessary to establish the existence of damage caused by that infringement – Concept of ‘non-material damage’.", "court": "CJ", "decided": "2024-01-25", "binding": "binding", "status": "final", "holdings": [ { "n": 1, "paragraph_id": "para_258", "text": "Articles 5, 24, 32 and 82 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), read together", "kind": "operative_part", "precedent_id": "precedent:eu:c-687-21#1" }, { "n": 2, "paragraph_id": "para_259", "text": "must be interpreted as meaning that in an action for compensation based on Article 82, the fact that the employees of the controller provided to an unauthorised third party in error a document containing personal data is not sufficient, in itself, to consider that the technical and organisational measures implemented by the controller at issue were not ‘appropriate’, within the meaning of Articles 24 and 32.", "kind": "operative_part", "precedent_id": "precedent:eu:c-687-21#2" }, { "n": 3, "paragraph_id": "para_262", "text": "must be interpreted as meaning that the right to compensation laid down in that provision, in particular in the case of non-material damage, fulfils a compensatory function, in that financial compensation based on that provision must allow the damage actually suffered as a result of the infringement of that regulation to be compensated in full, and not a punitive function.", "kind": "operative_part", "precedent_id": "precedent:eu:c-687-21#3" }, { "n": 4, "paragraph_id": "para_265", "text": "must be interpreted as meaning that that article does not require that the severity of the infringement made by the controller be taken into consideration for the purposes of compensation under that provision.", "kind": "operative_part", "precedent_id": "precedent:eu:c-687-21#4" }, { "n": 5, "paragraph_id": "para_268", "text": "must be interpreted as meaning that the person seeking compensation by way of that provision is required to establish not only the infringement of provisions of that regulation, but also that that infringement caused him or her material or non-material damage.", "kind": "operative_part", "precedent_id": "precedent:eu:c-687-21#5" }, { "n": 6, "paragraph_id": "para_271", "text": "must be interpreted as meaning that if a document containing personal data was provided to an unauthorised third party and it was established that that person did not become aware of those personal data, ‘non-material damage’, within the meaning of that provision, does not exist due to the mere fact that the data subject fears that, following that communication having made possible the making of a copy of that document before its recovery, a dissemination, even abuse, of those data may occur in the future.", "kind": "operative_part", "precedent_id": "precedent:eu:c-687-21#6" } ], "text_sha256": "802a3959eb2c5b9346785260f9398f8588db41ec0e9cbdd7aa8391b2e3adb86d", "method": "Domslutet efter 'On those grounds' i domens egen text.", "limits": [], "hash": "540c84133a5a5452d6622033a7dbb4274462f9555d2646d04213f93266ce59d3" }, "links": { "provisions": null, "case_law": { "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-687-21", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-687-21", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-687-21" }, "evidence": { "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-687-21", "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify", "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21?view=compact", "representations": { "sv": "https://legal.exploreworldai.com/eu/praxis/c-687-21", "en": "https://legal.exploreworldai.com/en/eu/praxis/c-687-21" }, "machine_languages": [ "en", "sv" ], "ref": "eu:c-687-21" }, "watch": { "risk": "https://legal.exploreworldai.com/api/public/v1/risk?id=eu%3Ac-687-21", "relations": "https://legal.exploreworldai.com/api/public/v1/relations?id=eu%3Ac-687-21", "risk_changes": "https://legal.exploreworldai.com/api/public/v1/risk-changes", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-687-21" }, "metadata": { "schema": "novacopilot_object_metadata/1", "canonical_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21", "source": "Source: NovaCopilot", "official_source": null, "short_answer": null, "short_answer_status": "not_in_register", "hash": "540c84133a5a5452d6622033a7dbb4274462f9555d2646d04213f93266ce59d3", "schema_version": "1", "last_verified_at": null, "verification_status": "not_verified_yet", "integrity_check_scope": "stored_content_only" }, "hash": "sha256:72a79fdc31b9f3d0bbfb9098626e0eb17dc7336c1b3f3ca5bafa044e1b12c401", "version": "legal-2026-10-25", "expires": "2026-10-27T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-25+legal-2026-10-25+2026-10-25T13:37:31", "content_hash": "sha256:72a79fdc31b9f3d0bbfb9098626e0eb17dc7336c1b3f3ca5bafa044e1b12c401", "revalidate_after": "2026-10-26T07:37:49.050Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }