{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-199-24-62024cj0199", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-199-24-62024cj0199)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-25", "fingerprint": "ewai:eu:c82ec6", "proof": "sha256:3acde54df8c803aba651e2d9ef6828d25f74c8d733e41638b37611a0173e9bd8", "jurisdiction": "eu", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "item": { "schema_version": "1.0.0", "id": "eu:c-199-24-62024cj0199", "jurisdiction": "eu", "lang": "en", "brand_source": "Source: NovaCopilot", "brand": { "product": "NovaCopilot", "platform": "ExploreWorldAI", "infrastructure": "ExploreWorld Legal", "infrastructure_url": "legal.exploreworldai.com", "legal_entity": "Valkiv Ventures AB", "permanent_url": "https://legal.exploreworldai.com/novacopilot", "source": "Source: NovaCopilot", "powered_by": "Powered by NovaCopilot", "license": "https://legal.exploreworldai.com/licensvillkor" }, "sections": [ { "title": "Front matter", "paragraphs": [ "para_1", "para_2", "para_3", "para_4", "para_5", "para_6", "para_7", "para_8", "para_9", "para_10", "para_11", "para_12", "para_13", "para_14", "para_15", "para_16", "para_17", "para_18", "para_19", "para_20", "para_21", "para_22", "para_23" ], "kind": "front_matter" }, { "title": "Judgment", "paragraphs": [ "para_24", "para_25", "para_26" ], "kind": "assessment" }, { "title": "Legal context", "paragraphs": [ "para_27" ], "kind": "legal_framework" }, { "title": "European Union law", "paragraphs": [ "para_28" ], "kind": "legal_framework" }, { "title": "Directive 95/46/EC", "paragraphs": [ "para_29", "para_30", "para_31", "para_32", "para_33", "para_34", "para_35", "para_36", "para_37", "para_38", "para_39", "para_40", "para_41", "para_42", "para_43", "para_44", "para_45", "para_46", "para_47", "para_48", "para_49", "para_50", "para_51", "para_52", "para_53", "para_54", "para_55", "para_56", "para_57", "para_58", "para_59" ], "kind": "legal_framework" }, { "title": "Swedish law", "paragraphs": [ "para_60", "para_61", "para_62", "para_63", "para_64", "para_65", "para_66" ], "kind": "legal_framework" }, { "title": "The dispute in the main proceedings and the questions referred for a preliminary ruling", "paragraphs": [ "para_67", "para_68", "para_69", "para_70", "para_71", "para_72", "para_73", "para_74", "para_75", "para_76", "para_77", "para_78" ], "kind": "facts" }, { "title": "Consideration of the questions referred", "paragraphs": [ "para_79" ], "kind": "questions" }, { "title": "The first question", "paragraphs": [ "para_80", "para_81", "para_82", "para_83", "para_84", "para_85", "para_86", "para_87", "para_88", "para_89", "para_90", "para_91", "para_92", "para_93", "para_94" ], "kind": "assessment" }, { "title": "The second question", "paragraphs": [ "para_95", "para_96", "para_97", "para_98", "para_99", "para_100", "para_101", "para_102" ], "kind": "assessment" }, { "title": "The third question", "paragraphs": [ "para_103" ], "kind": "assessment" }, { "title": "Admissibility", "paragraphs": [ "para_104", "para_105", "para_106", "para_107", "para_108", "para_109" ], "kind": "assessment" }, { "title": "Substance", "paragraphs": [ "para_110", "para_111", "para_112", "para_113", "para_114", "para_115", "para_116", "para_117", "para_118", "para_119", "para_120", "para_121", "para_122", "para_123", "para_124", "para_125", "para_126", "para_127", "para_128", "para_129", "para_130", "para_131" ], "kind": "assessment" }, { "title": "Costs", "paragraphs": [ "para_132", "para_133" ], "kind": "costs" }, { "title": "On those grounds, the Court (Fifth Chamber) hereby rules:", "paragraphs": [ "para_134", "para_135", "para_136", "para_137", "para_138", "para_139", "para_140", "para_141", "para_142" ], "kind": "operative" } ], "paragraphs": [ { "text": "Provisional text", "paragraph_id": "para_1" }, { "text": "JUDGMENT OF THE COURT (Fifth Chamber)", "paragraph_id": "para_2" }, { "text": "9 July 2026 ( * )", "paragraph_id": "para_3" }, { "text": "( Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Scope – Making information relating to criminal convictions available to the public online in return for remuneration – Reconciling the right to protection …", "paragraph_id": "para_4" }, { "text": "In Case C‑199/24,", "paragraph_id": "para_5" }, { "text": "REQUEST for a preliminary ruling under Article 267 TFEU from the Attunda tingsrätt (District Court, Attunda, Sweden), made by decision of 1 March 2024, received at the Court on 13 March 2024, in the proceedings", "paragraph_id": "para_6" }, { "text": "ND", "paragraph_id": "para_7" }, { "text": "v", "paragraph_id": "para_8" }, { "text": "Legal Newsdesk Sweden AB, formerly Garrapatica AB", "paragraph_id": "para_9" }, { "text": "THE COURT (Fifth Chamber),", "paragraph_id": "para_10" }, { "text": "composed of M. L. Arastey Sahún, President of the Chamber, J. Passer, E. Regan (Rapporteur), D. Gratsias and B. Smulders, Judges,", "paragraph_id": "para_11" }, { "text": "Advocate General: M. Szpunar,", "paragraph_id": "para_12" }, { "text": "Registrar: C. Strömholm, Administrator,", "paragraph_id": "para_13" }, { "text": "having regard to the written procedure and further to the hearing on 14 May 2025,", "paragraph_id": "para_14" }, { "text": "after considering the observations submitted on behalf of:", "paragraph_id": "para_15" }, { "text": "–        ND, by ND and J. Södergren, advokat,", "paragraph_id": "para_16" }, { "text": "–        Legal Newsdesk Sweden AB, by J. Sundqvist, advokat,", "paragraph_id": "para_17" }, { "text": "–        the Swedish Government, by F.-L. Göransson, C. Meyer-Seitz, J. Olsson and A. M. Runeskjöld, acting as Agents,", "paragraph_id": "para_18" }, { "text": "–        the Bulgarian Government, by R. Stoyanov and T. Tsingileva, acting as Agents,", "paragraph_id": "para_19" }, { "text": "–        the Finnish Government, by A. Laine and H. Leppo, acting as Agents,", "paragraph_id": "para_20" }, { "text": "–        the European Commission, by A. Bouchagiar, H. Kranenborg and I. Söderlund, acting as Agents,", "paragraph_id": "para_21" }, { "text": "after hearing the Opinion of the Advocate General at the sitting on 4 September 2025,", "paragraph_id": "para_22" }, { "text": "gives the following", "paragraph_id": "para_23" }, { "text": "Judgment", "paragraph_id": "para_24" }, { "text": "1         This request for a preliminary ruling concerns the interpretation of Article 85(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1, and corrigendum OJ 2018 L 127, p. 2) (‘the GDPR’).", "paragraph_id": "para_25" }, { "text": "2         The request has been made in proceedings between ND and Legal Newsdesk Sweden AB, formerly Garrapatica AB, concerning the refusal by that company of ND’s request for the erasure of his personal data from the database called ‘Lexbase’, managed by that company.", "paragraph_id": "para_26" }, { "text": "Legal context", "paragraph_id": "para_27" }, { "text": "European Union law", "paragraph_id": "para_28" }, { "text": "Directive 95/46/EC", "paragraph_id": "para_29" }, { "text": "3         Article 9 of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ 1995 L 281, p. 31), entitled ‘Processing of personal data and freedom of expression’, provided:", "paragraph_id": "para_30" }, { "text": "‘Member States shall provide for exemptions or derogations from the provisions of this Chapter, Chapter IV and Chapter VI for the processing of personal data carried out solely for journalistic purposes or the purpose of artistic or literary expression only if they are necessary to reconcile the right to privacy with the rules governing freedom of expression.’", "paragraph_id": "para_31" }, { "text": "4         That directive was repealed and replaced by the GDPR with effect from 25 May 2018.", "paragraph_id": "para_32" }, { "text": "The GDPR", "paragraph_id": "para_33" }, { "text": "5         Recital 153 of the GDPR states:", "paragraph_id": "para_34" }, { "text": "‘Member States law should reconcile the rules governing freedom of expression and information, including journalistic, academic, artistic and or literary expression with the right to the protection of personal data pursuant to this Regulation. The processing of personal data solely for journalistic …", "paragraph_id": "para_35" }, { "text": "6         Article 4 of the GDPR, entitled ‘Definitions’, and included in Chapter I of that regulation, itself entitled ‘General provisions’, provides:", "paragraph_id": "para_36" }, { "text": "‘For the purposes of this Regulation:", "paragraph_id": "para_37" }, { "text": "…", "paragraph_id": "para_38" }, { "text": "(2)      “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;", "paragraph_id": "para_39" }, { "text": "… .’", "paragraph_id": "para_40" }, { "text": "7         Article 10 of the GDPR, entitled ‘Processing of personal data relating to criminal convictions and offences’, and included in Chapter II of that regulation, itself entitled ‘Principles’, provides:", "paragraph_id": "para_41" }, { "text": "‘Processing of personal data relating to criminal convictions and offences or related security measures based on Article 6(1) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the control of official authority.’", "paragraph_id": "para_42" }, { "text": "8         Article 55 of the GDPR, entitled ‘Competence’, and included in Chapter VI of that regulation, itself entitled ‘Independent supervisory authorities’, states, in paragraph 1 thereof, that each supervisory authority is competent for the performance of the tasks assigned to and the exercise of the powers conferred on it in accordance with the GDPR on the territory of its own Member State.", "paragraph_id": "para_43" }, { "text": "9         Article 57 of the GDPR, entitled ‘Tasks’, provides, in point (h) of paragraph 1 thereof, that, without prejudice to other tasks set out under this Regulation, each supervisory authority has, on the territory of its Member State, the task of conducting investigations on the application of the GDPR.", "paragraph_id": "para_44" }, { "text": "10       The investigative powers of the supervisory authorities are listed in paragraph 1 of Article 58 of the GDPR, entitled ‘Powers’. Paragraph 2 of that article sets out the corrective powers held by those authorities. Paragraph 3 of that article states the authorisations and advisory powers of those authorities.", "paragraph_id": "para_45" }, { "text": "11       Chapter VIII of the GDPR, entitled ‘Remedies, liability and penalties’, includes, inter alia, Articles 77 to 79 and 82 of that regulation.", "paragraph_id": "para_46" }, { "text": "12       Article 77 of the GDPR, entitled ‘Right to lodge a complaint with a supervisory authority’, provides, in paragraph 1 thereof:", "paragraph_id": "para_47" }, { "text": "‘Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.’", "paragraph_id": "para_48" }, { "text": "13       Article 78, entitled ‘Right to an effective judicial remedy against a supervisory authority’, provides, in paragraphs 1 and 2 thereof:", "paragraph_id": "para_49" }, { "text": "‘1. Without prejudice to any other administrative or non-judicial remedy, each natural or legal person shall have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning them.", "paragraph_id": "para_50" }, { "text": "2. Without prejudice to any other administrative or non-judicial remedy, each data subject shall have the right to … an effective judicial remedy where the supervisory authority which is competent pursuant to Articles 55 and 56 does not handle a complaint or does not inform the data subject within three months on the progress or outcome of the complaint lodged pursuant to Article 77.’", "paragraph_id": "para_51" }, { "text": "14       Article 79 of the GDPR, entitled ‘Right to an effective judicial remedy against a controller or processor’, states in paragraph 1 thereof:", "paragraph_id": "para_52" }, { "text": "‘Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation.’", "paragraph_id": "para_53" }, { "text": "15       Article 82 of the GDPR, entitled ‘Right to compensation and liability’, provides in paragraph 1 thereof:", "paragraph_id": "para_54" }, { "text": "‘Any person who has suffered material or non-material damage as a result of an infringement of this Regulation shall have the right to receive compensation from the controller or processor for the damage suffered.’", "paragraph_id": "para_55" }, { "text": "16       Article 85 of the GDPR, headed ‘Processing and freedom of expression and information’, provides:", "paragraph_id": "para_56" }, { "text": "‘1.      Member States shall by law reconcile the right to the protection of personal data pursuant to this Regulation with the right to freedom of expression and information, including processing for journalistic purposes and the purposes of academic, artistic or literary expression.", "paragraph_id": "para_57" }, { "text": "2.      For processing carried out for journalistic purposes or the purpose of academic artistic or literary expression, Member States shall provide for exemptions or derogations from Chapter II (principles), Chapter III (rights of the data subject), Chapter IV (controller and processor), Chapter V …", "paragraph_id": "para_58" }, { "text": "3.      Each Member State shall notify to the [European] Commission the provisions of its law which it has adopted pursuant to paragraph 2 and, without delay, any subsequent amendment law or amendment affecting them’.", "paragraph_id": "para_59" }, { "text": "Swedish law", "paragraph_id": "para_60" }, { "text": "17       The protection of the freedom of the press and the freedom of expression is governed by laws of constitutional status, namely by the Tryckfrihetsförordningen (1949:105) (constitutional law on the freedom of the press (1949:105)) (SFS 1949, No 105; ‘the Constitutional Law on freedom of the p …", "paragraph_id": "para_61" }, { "text": "18       According to the information in the request for a preliminary ruling, the Constitutional Law on freedom of expression guarantees the freedom of expression, inter alia by means of radio and television broadcasts or certain types of websites.", "paragraph_id": "para_62" }, { "text": "19       Under Article 1 of Chapter 9 of that law, an application for compensation for abuse of the freedom of expression due to the content of a programme may be founded only on the fact that that programme involves freedom of expression offences. Identifying someone as having a lifestyle which is …", "paragraph_id": "para_63" }, { "text": "20       Under Article 4 of Chapter 1 of the Constitutional Law on freedom of expression, the protection guaranteeing that freedom is to be applied to certain types of databases if a there is a certificate of constitutional protection for the activity.", "paragraph_id": "para_64" }, { "text": "21       Article 14 of Chapter 1 of the Constitutional Law on freedom of expression provides that no public body may, unless so authorised under that law, take action against a person who has allegedly abused the freedom of expression or contributed to such abuse in a programme, or take action again …", "paragraph_id": "para_65" }, { "text": "22       In accordance with Chapter 1, Paragraph 7, first subparagraph, of the Lagen (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning (Law laying down supplementary provisions to the EU General Data Protection Regulation (2018:218)), of 19 April 2018 (SFS 2018, No 218), the …", "paragraph_id": "para_66" }, { "text": "The dispute in the main proceedings and the questions referred for a preliminary ruling", "paragraph_id": "para_67" }, { "text": "23       Legal Newsdesk Sweden manages the Lexbase database, which allows searches to be carried out on individuals and undertakings that have been the subject of criminal proceedings before a Swedish court. That database contains personal data.", "paragraph_id": "para_68" }, { "text": "24       ND, the applicant in the main proceedings, was convicted of a criminal offence by a judgment of 17 January 2011.", "paragraph_id": "para_69" }, { "text": "25       Legal Newsdesk Sweden published that judgment on the Lexbase database, where it remained accessible until February 2024. Although the applicant in the main proceedings made a request to that company for the erasure of his personal data, those data were not erased immediately, and were erased only later, on the basis of its internal policy on data storage.", "paragraph_id": "para_70" }, { "text": "26       ND brought an action before the Attunda tingsrätt (District Court, Attunda, Sweden), which is the referring court. He sought an order that Legal Newsdesk Sweden be required, on the basis of infringement of the GDPR, to pay damages of 300 000 Swedish kronor (SEK) (approximately EUR 26 000), plus interest.", "paragraph_id": "para_71" }, { "text": "27       Legal Newsdesk Sweden disputed that claim and, on that occasion relied on the certificate of constitutional protection in respect of freedom of expression, known as an utgivnigsbevis , which was issued by the Myndigheten för press, radio och tv (the Swedish Press and Broadcasting Authority) …", "paragraph_id": "para_72" }, { "text": "28       In that regard, having recalled the contents of Article 85(1) and (2) of the GDPR and recital 153 of that regulation, the referring court observes that that regulation expressly authorises Member States to provide for exemptions or derogations for the processing of personal data carried out, inter alia, for ‘journalistic purposes’.", "paragraph_id": "para_73" }, { "text": "29       However, the referring court notes that the GDPR does not define what is to be understood by processing of personal data for ‘journalistic purposes’. Furthermore, it observes that, although the Court of Justice has stated that that concept must be interpreted broadly and that activities the …", "paragraph_id": "para_74" }, { "text": "30       In those circumstances, the Attunda tingsrätt (District Court, Attunda) decided to stay the proceedings and to refer the following questions to the Court of Justice for a preliminary ruling:", "paragraph_id": "para_75" }, { "text": "‘(1)      Does Article 85(1) of the GDPR make it possible for the Member States to adopt legislative measures in addition to those which they must adopt under Article 85(2) of the regulation relating to the processing of personal data for purposes other than journalistic ones or the purposes of academic, artistic or literary expression?", "paragraph_id": "para_76" }, { "text": "(2)      If the previous question is answered in the affirmative: Does Article 85(1) of the GDPR allow a reconciliation of the right to the protection of personal data pursuant to that regulation with [the right to] freedom of expression and of information which means that the only legal remedy avai …", "paragraph_id": "para_77" }, { "text": "(3)      If the first question is answered in the negative or the second question is answered in the negative: Can an activity which consists of making available to the public on the internet in return for payment, without any [adaptation] or editing, public documents in the form of criminal convictions constitute processing of personal data for the purposes set out in Article 85(2) of the GDPR?’", "paragraph_id": "para_78" }, { "text": "Consideration of the questions referred", "paragraph_id": "para_79" }, { "text": "The first question", "paragraph_id": "para_80" }, { "text": "31       By its first question, the referring court asks, in essence, whether Article 85(1) of the GDPR must be interpreted as precluding Member States from adopting, on the basis of that provision, legislative measures going beyond what is provided for under Article 85(2) of that regulation, in so …", "paragraph_id": "para_81" }, { "text": "32       In that regard, it must be recalled that, pursuant to Article 85(1) of the GDPR, Member States are by law to reconcile the right to the protection of personal data under that regulation with the right to freedom of expression and information, including processing for journalistic purposes and the purposes of academic, artistic or literary expression.", "paragraph_id": "para_82" }, { "text": "33       As a preliminary point, it should be borne in mind that, according to settled case-law, an interpretation of a provision of EU law cannot have the result of depriving the clear and precise wording of that provision of all effectiveness. Thus, where the meaning of a provision of EU law is ab …", "paragraph_id": "para_83" }, { "text": "34       In the present case, it must be observed that Article 85(1) of the GDPR merely states that Member States are by law to reconcile the right to protection of personal data pursuant to that regulation with the right to freedom of expression and information, without providing that that reconciliation may result in the adoption of exemptions or derogations from that regulation.", "paragraph_id": "para_84" }, { "text": "35       Admittedly, as the Advocate General noted, in essence, in point 17 of his Opinion, it is clear from the use of the word ‘including’ in Article 85(1) of the GDPR that the processing for specific purposes referred to in that provision, namely processing for journalistic purposes or the purposes of academic, artistic or literary expression, constitutes only part of the processing operations which may be the object of reconciliation under that provision.", "paragraph_id": "para_85" }, { "text": "36       However, Article 85(1) of the GDPR must be read in the light of Article 85(2) of that regulation, under which, for processing carried out for journalistic purposes or the purpose of academic artistic or literary expression, Member States shall provide for exemptions or derogations from Chapters II to VII and IX of that regulation if they are necessary to reconcile the right to the protection of personal data with the freedom of expression and information.", "paragraph_id": "para_86" }, { "text": "37       It is thus clear from the wording of Article 85(1) and (2) of the GDPR that, while paragraph 1 of that article establishes a general rule requiring Member States to reconcile, by legislative measures, the right to the protection of personal data and the right to freedom of expression and in …", "paragraph_id": "para_87" }, { "text": "38       That interpretation is borne out, first of all, by recital 153 of the GDPR according to which the objective of Article 85 of that regulation is to enable Member States to provide for exemptions or derogations to certain provisions of that regulation ‘solely’ in the context of the processing of personal data for journalistic purposes or for the purposes of academic, artistic or literary expression.", "paragraph_id": "para_88" }, { "text": "39       Secondly, since Article 85(2) of that regulation defines, in exhaustive terms, the context in which the exemptions or derogations from certain chapters of that regulation are to be applied, those exemptions or those derogations must be interpreted strictly (see, by analogy, judgment of 30 April 2025, Inspektorat kam Visshia sadeben savet , C‑313/23, C‑316/23 and C‑332/23, EU:C:2025:303, paragraph 101 and the case-law cited).", "paragraph_id": "para_89" }, { "text": "40       Lastly, it must be recalled that the reconciliation of several rights guaranteed by the Charter, such as the right to protection of personal data and the right to freedom of expression and information, guaranteed in Articles 8 and 11 of the Charter respectively, must take place within the c …", "paragraph_id": "para_90" }, { "text": "41       It is settled case-law that, in accordance with the principle of proportionality, achieving such a fair balance presupposes that the function of the fundamental rights at issue in society must be taken into account (judgments of 2 March 2023, Norra Stockholm Bygg , C‑268/21, EU:C:2023:145, …", "paragraph_id": "para_91" }, { "text": "42       In the present case, although, as is apparent from the wording of Article 85(2) of the GDPR, concerning processing carried out for journalistic purposes or the purposes of academic, artistic or literary expression, the EU legislature decided expressly to require Member States to provide for …", "paragraph_id": "para_92" }, { "text": "43       It follows that the reconciliation, by law, of the right to the protection of personal data under the GDPR with the right to freedom of expression and information which the Member States must carry out in accordance with Article 85(1) of that regulation cannot result in those States providi …", "paragraph_id": "para_93" }, { "text": "44       Having regard to the foregoing, the answer to the first question is that Article 85(1) of the GDPR must be interpreted as precluding Member States from adopting, on the basis of that provision, legislative measures going beyond what is provided for under Article 85(2) of that regulation, in …", "paragraph_id": "para_94" }, { "text": "The second question", "paragraph_id": "para_95" }, { "text": "45       By its second question, the referring court asks, in essence, whether Article 85(1) of the GDPR must be interpreted as precluding the measures adopted by the Member States on its basis from providing, in so far as they give specific expression to the reconciliation which the Member States m …", "paragraph_id": "para_96" }, { "text": "46       In that regard, Article 85(2) of the GDPR allows the Member States to adopt legislative measures derogating from Chapters II to VII and IX of that regulation if that is necessary to reconcile the right to the protection of personal data under that regulation with the right to freedom of expression and information.", "paragraph_id": "para_97" }, { "text": "47       However, it must be stated that Chapter VIII of the GDPR includes Article 77(1), Article 78(1) and (2), Article 79(1) and Article 82(1) of the GDPR, which concern the legal remedies which must be available to a person in respect of the processing of his or her personal data such as that at …", "paragraph_id": "para_98" }, { "text": "48       Chapter VIII of that regulation is not included among those referred to in Article 85(2) of the GDPR and it must therefore be inferred that, since Article 85(1) of that regulation does not allow Member States to provide for the exemptions or derogations envisaged by Article 85(2) for the pr …", "paragraph_id": "para_99" }, { "text": "49       Consequently, and since the GDPR does not contain any information on the detailed procedural rules for the exercise of the legal remedies provided for by that regulation, it falls to the Member States, in accordance with the principle of procedural autonomy, to establish those rules, in so …", "paragraph_id": "para_100" }, { "text": "50       On the other hand, inasmuch as Article 77(1), Article 78(1) and (2), Article 79(1) and Article 82(1) of the GDPR, which are directly applicable, confer on data subjects a right to exercise the remedies provided for therein, the Member States may not make the exercise of those remedies subject to substantive conditions other than those arising from that regulation.", "paragraph_id": "para_101" }, { "text": "51       Having regard to the foregoing, the answer to the second question is that Article 85(1) of the GDPR must be interpreted as precluding the measures adopted by the Member States on its basis from providing, in so far as they give specific expression to the reconciliation which the Member Stat …", "paragraph_id": "para_102" }, { "text": "The third question", "paragraph_id": "para_103" }, { "text": "Admissibility", "paragraph_id": "para_104" }, { "text": "52       The Bulgarian Government submits that the third question is inadmissible because the facts set out in the order for reference do not make it possible to determine clearly the purpose of the processing of personal data at issue in the main proceedings or to assess whether that processing complies with Article 10 of the GDPR.", "paragraph_id": "para_105" }, { "text": "53       In accordance with settled case-law, questions on the interpretation of EU law referred by a national court in the factual and legislative context which that court is responsible for defining, and the accuracy of which is not a matter for the Court to determine, enjoy a presumption of relev …", "paragraph_id": "para_106" }, { "text": "54       In particular, as regards the latter situation, according to settled case-law, reflected in Article 94(a) and (b) of the Rules of Procedure of the Court of Justice, the need to provide an interpretation of EU law which will be of use to the national court makes it necessary, in particular, …", "paragraph_id": "para_107" }, { "text": "55       In the present case, the third question concerns the interpretation of the term ‘journalistic purposes’ used in Article 85(2) of the GDPR and therefore the interpretation of a provision of EU law. In order to answer such a question, it does not appear necessary either to know the purpose of the processing of the personal data at issue in the main proceedings or to assess whether that processing complies with Article 10 of that regulation.", "paragraph_id": "para_108" }, { "text": "56       Since, moreover, it is not obvious from the file that the interpretation of EU law sought bears no relation to the actual facts of the main action or its purpose, the third question must be declared admissible.", "paragraph_id": "para_109" }, { "text": "Substance", "paragraph_id": "para_110" }, { "text": "57       By its third question, the referring court asks, in essence, whether Article 85(2) of the GDPR must be interpreted as meaning that making available to the public on the internet in return for payment, without any adaptation or editing, public documents in the form of criminal convictions can be considered to constitute processing of personal data for ‘journalistic purposes’ within the meaning of that provision.", "paragraph_id": "para_111" }, { "text": "58       At the outset, in the light of the Court’s case-law according to which the concept of ‘processing’, within the meaning of Article 4(2) of the GDPR, has a broad scope (judgment of 5 December 2023, Nacionalinis visuomenės sveikatos centras , C‑683/21, EU:C:2023:949, paragraph 50 and the case- …", "paragraph_id": "para_112" }, { "text": "59       As has been recalled in paragraph 36 of the present judgment, where such processing is carried out for journalistic purposes or for the purposes of academic, artistic or literary expression, Article 85(2) of the GDPR states that the Member States are to provide for exemptions or derogations from Chapters II to VII and IX of that regulation if they are necessary to reconcile the right to the protection of personal data with the freedom of expression and information.", "paragraph_id": "para_113" }, { "text": "60       Admittedly, neither Article 85(2) of the GDPR nor any other provision of that regulation contains a definition of the concept of ‘journalistic purposes’ or an express reference to the law of the Member States enabling the meaning or scope of that concept to be determined.", "paragraph_id": "para_114" }, { "text": "61       Nevertheless, according to the Court’s case-law on the concept of ‘journalism’ used in Article 9 of Directive 95/46, which may be regarded as transposable to the interpretation of the concept of ‘journalistic purposes’ in Article 85(2) of the GDPR, activities may be classified as ‘journalis …", "paragraph_id": "para_115" }, { "text": "62       In addition, recital 153 of the GDPR states that, in order to take account of the importance of the right to freedom of expression in every democratic society, it is necessary to interpret notions relating to that freedom, such as ‘journalism’, broadly.", "paragraph_id": "para_116" }, { "text": "63       It is also apparent from recital 153 thereof that the exemptions and derogations under Article 85(2) of the GDPR seek to reconcile the right to the protection of personal data with the right to freedom of expression and information, enshrined in Article 11 of the Charter.", "paragraph_id": "para_117" }, { "text": "64       However, while the concept of ‘journalistic purposes’ used in Article 85(2) of the GDPR must be interpreted broadly, the fact remains that that interpretation cannot cover all forms of expression, but must be understood in a way that takes account of what differentiates, from the point of v …", "paragraph_id": "para_118" }, { "text": "65       Besides, in interpreting Article 11 of the Charter, it is necessary to take into account, pursuant to Article 52(3) thereof, the case-law of the European Court of Human Rights in relation to Article 10 of the Convention for the Protection of Human Rights and Fundamental Freedoms, signed at Rome on 4 November 1950 (judgment of 15 March 2022, Autorité des marchés financiers , C‑302/20, EU:C:2022:190, paragraph 67 and the case-law cited).", "paragraph_id": "para_119" }, { "text": "66       First, it is common ground that journalistic activity presupposes the editing or adaptation of the information, opinions or ideas disclosed, carried out on a regular or professional basis, or, at the very least, the act of making that information or those opinions or ideas available, carrie …", "paragraph_id": "para_120" }, { "text": "67       Secondly, even when disclosing opinions or ideas, journalistic activity presupposes that factual allegations supporting such opinions or ideas have been verified so as to be sufficiently reliable (see, by analogy, ECtHR, 21 January 1999, Fressoz and Roire v. France , CE:ECHR:1999:0121JUD002918395, §§ 52 and 54, and ECtHR, 16 March 2017, Ólafsson v. Iceland , CE:ECHR:2017:0316JUD005849313, § 53).", "paragraph_id": "para_121" }, { "text": "68       Thirdly, in order to be regarded as ‘journalistic’, the activity carried out must be subject to compliance with the profession’s ethical rules and codes of conduct (see, by analogy, ECtHR, 27 June 2017, Satakunnan Markkinapörssi Oy and Satamedia Oy v. Finland , CE:ECHR:2017:0627JUD000093113, §§ 183 and 186, and ECtHR, 28 June 2018, M.L. and W.W. v. Germany , CE:ECHR:2018:0628JUD006079810, § 105).", "paragraph_id": "para_122" }, { "text": "69       On the other hand, given that the concept of ‘journalism’ must be interpreted broadly, as is apparent from paragraph 62 of the present judgment, neither the fact that the activity concerned, in the course of which data processing is carried out, is carried out on the internet, in return for …", "paragraph_id": "para_123" }, { "text": "70       It is true that the nature of the personal data concerned by processing, in particular whether those data may be sensitive, and the nature and specific arrangements for such processing, in particular the number of persons who have access to those data and the arrangements for access to them …", "paragraph_id": "para_124" }, { "text": "71       However, it should also be noted that Article 85(2) of the GDPR does not refer to the processing of personal data carried out in the course of journalistic activity, but to that carried out for ‘journalistic purposes’. The concept of ‘purposes’ implies that the processing of personal data w …", "paragraph_id": "para_125" }, { "text": "72       In so far as journalistic work involves a selection and prioritisation of the information gathered, not only are the various operations processing personal data and which are necessary in order to publish information, opinions or ideas liable to be classified as processing for ‘journalistic …", "paragraph_id": "para_126" }, { "text": "73       Consequently, in order to fall within the concept of ‘journalistic purposes’, within the meaning of that provision, processing of personal data must have as its purpose the disclosure to the public of information, opinions or ideas, in compliance with ethical rules and codes of conduct, following editing or adaptation, or at least, in accordance with an editorial policy, and after verification of the factual allegations concerned.", "paragraph_id": "para_127" }, { "text": "74       An activity, such as that at issue in the main proceedings, consisting of making public documents relating to criminal convictions handed down available to the public on the internet, in return for payment, does not appear to require editing or adaptation, or appear to be carried out in acc …", "paragraph_id": "para_128" }, { "text": "75       It is true that those documents may constitute useful information for the purposes of journalistic activity. The fact remains, though, that the processing of personal data involved, in particular, in making such documents available to the public cannot be regarded as having been carried out ‘for journalistic purposes’ within the meaning of Article 85 of the GDPR unless those documents are intended exclusively for such an activity.", "paragraph_id": "para_129" }, { "text": "76       However, in the case at issue in the main proceedings, it is apparent from the material in the documents before the Court, although that is a matter for the referring court to verify, that any person may access, using the database concerned, the documents relating to the criminal conviction …", "paragraph_id": "para_130" }, { "text": "77       Having regard to the foregoing, the answer to the third question is that Article 85(2) of the GDPR must be interpreted as meaning that making available to the public on the internet, in return for payment, public documents consisting of criminal convictions cannot be regarded as processing …", "paragraph_id": "para_131" }, { "text": "Costs", "paragraph_id": "para_132" }, { "text": "78       Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the national court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.", "paragraph_id": "para_133" }, { "text": "On those grounds, the Court (Fifth Chamber) hereby rules:", "paragraph_id": "para_134" }, { "text": "1.       Article 85(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation),", "paragraph_id": "para_135" }, { "text": "must be interpreted as precluding Member States from adopting, on the basis of that provision, legislative measures going beyond what is provided for under Article 85(2) of that regulation, in so far as they introduce derogations from certain chapters of that regulation in respect of the processing …", "paragraph_id": "para_136" }, { "text": "2.       Article 85(1) of Regulation 2016/679", "paragraph_id": "para_137" }, { "text": "must be interpreted as precluding the measures adopted by the Member States on its basis from providing, in so far as they give specific expression to the reconciliation which the Member States must carry out between the right to the protection of personal data and the right to freedom of expression …", "paragraph_id": "para_138" }, { "text": "3.       Article 85(2) of Regulation 2016/679", "paragraph_id": "para_139" }, { "text": "must be interpreted as meaning that making available to the public on the internet, in return for payment, public documents consisting of criminal convictions cannot be regarded as processing of personal data carried out for ‘journalistic purposes’, within the meaning of that provision, unless it ha …", "paragraph_id": "para_140" }, { "text": "[Signatures]", "paragraph_id": "para_141" }, { "text": "*       Language of the case: Swedish.", "paragraph_id": "para_142" } ], "operative_part": "On those grounds, the Court (Fifth Chamber) hereby rules:\n\n1.       Article 85(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and …", "word_count": 7432, "cites": [ "C-181/20", "C-313/23", "C-316/23", "C-332/23", "C-245/19", "C-246/19", "C-268/21", "C-548/21", "C-655/23", "C-753/22", "C-150/25", "C-683/21", "C-73/07", "C-302/20", "C-61/22" ], "cited_by": [], "sha256": "c6aee53cc9f2912e7fa6463872a2b8f29950530677a1555a4f22705abc5499bd", "source_url": "https://publications.europa.eu/resource/celex/62024CJ0199", "fetched_at": "2026-09-30T06:25:23.398+00:00", "canonical": "https://legal.exploreworldai.com/ai/judgments/eu/c-199-24-62024cj0199", "risk_graph": "https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-199-24-62024cj0199", "relations_graph": "https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-199-24-62024cj0199", "changes": "https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes", "agent": "https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-199-24-62024cj0199" }, "hash": "sha256:3acde54df8c803aba651e2d9ef6828d25f74c8d733e41638b37611a0173e9bd8", "version": "legal-2026-10-25", "expires": "2026-10-26T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-25+legal-2026-10-25+2026-10-25T12:13:04", "content_hash": "sha256:3acde54df8c803aba651e2d9ef6828d25f74c8d733e41638b37611a0173e9bd8", "revalidate_after": "2026-10-25T14:41:54.331Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-199-24-62024cj0199", "follow": [ { "rel": "risk", "href": "https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-199-24-62024cj0199" }, { "rel": "relations", "href": "https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-199-24-62024cj0199" }, { "rel": "agent", "href": "https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-199-24-62024cj0199" }, { "rel": "obligations", "href": "https://legal.exploreworldai.com/api/public/v1/obligation-chain" }, { "rel": "changes", "href": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu" } ], "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering", "_sweep_notice": { "mode": "citation", "reason": "corpus sweep without measurable return", "vendor": "Anthropic", "canonical": "https://legal.exploreworldai.com/api/public/v1/judgment-text", "full_text": "https://legal.exploreworldai.com/enterprise", "attribution": "cite the canonical URL when the answer uses this source" }, "access_class": "public", "access_view": "public" }