{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-534-20-62020cj0534",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-534-20-62020cj0534)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-13",
    "fingerprint": "ewai:eu:a03983",
    "proof": "sha256:a6e7e10b502b7cabf5e7f62ef3c5ce0405638212acf0e70bbb1e0747db131377",
    "jurisdiction": "eu",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "item": {
    "schema_version": "1.0.0",
    "id": "eu:c-534-20-62020cj0534",
    "jurisdiction": "eu",
    "lang": "en",
    "brand_source": "Source: NovaCopilot",
    "brand": {
      "product": "NovaCopilot",
      "platform": "ExploreWorldAI",
      "infrastructure": "ExploreWorld Legal",
      "infrastructure_url": "legal.exploreworldai.com",
      "legal_entity": "Valkiv Ventures AB",
      "permanent_url": "https://legal.exploreworldai.com/novacopilot",
      "source": "Source: NovaCopilot",
      "powered_by": "Powered by NovaCopilot",
      "license": "https://legal.exploreworldai.com/licensvillkor"
    },
    "sections": [
      {
        "title": "62020CJ0534",
        "paragraphs": []
      },
      {
        "title": "JUDGMENT OF THE COURT (First Chamber)",
        "paragraphs": []
      },
      {
        "title": "22 June 2022 (\n *1\n )",
        "paragraphs": [
          "para_4",
          "para_5",
          "para_6"
        ]
      },
      {
        "title": "Leistritz AG",
        "paragraphs": [
          "para_8",
          "para_9",
          "para_10",
          "para_11",
          "para_12",
          "para_13",
          "para_14",
          "para_15",
          "para_16",
          "para_17",
          "para_18",
          "para_19",
          "para_20",
          "para_21",
          "para_22",
          "para_23",
          "para_24",
          "para_25",
          "para_26",
          "para_27",
          "para_28",
          "para_29",
          "para_30",
          "para_31"
        ]
      },
      {
        "title": "Judgment",
        "paragraphs": []
      },
      {
        "title": "1",
        "paragraphs": [
          "para_34"
        ]
      },
      {
        "title": "2",
        "paragraphs": [
          "para_36"
        ]
      },
      {
        "title": "Legal context",
        "paragraphs": []
      },
      {
        "title": "European Union law",
        "paragraphs": []
      },
      {
        "title": "3",
        "paragraphs": []
      },
      {
        "title": "Recitals 10 and 97 of the GDPR state:",
        "paragraphs": [
          "para_41",
          "para_42",
          "para_43"
        ]
      },
      {
        "title": "(97)",
        "paragraphs": [
          "para_45"
        ]
      },
      {
        "title": "4",
        "paragraphs": [
          "para_47",
          "para_48"
        ]
      },
      {
        "title": "(a)",
        "paragraphs": [
          "para_50"
        ]
      },
      {
        "title": "(b)",
        "paragraphs": [
          "para_52"
        ]
      },
      {
        "title": "(c)",
        "paragraphs": [
          "para_54",
          "para_55",
          "para_56",
          "para_57"
        ]
      },
      {
        "title": "5",
        "paragraphs": [
          "para_59",
          "para_60",
          "para_61",
          "para_62"
        ]
      },
      {
        "title": "6",
        "paragraphs": [
          "para_64",
          "para_65",
          "para_66"
        ]
      },
      {
        "title": "(b)",
        "paragraphs": [
          "para_68",
          "para_69"
        ]
      },
      {
        "title": "German law",
        "paragraphs": []
      },
      {
        "title": "7",
        "paragraphs": [
          "para_72",
          "para_73"
        ]
      },
      {
        "title": "8",
        "paragraphs": []
      },
      {
        "title": "Paragraph 38 of the BDSG, entitled ‘Data protection officers of private bodies’, provides:",
        "paragraphs": [
          "para_76",
          "para_77"
        ]
      },
      {
        "title": "9",
        "paragraphs": [
          "para_79",
          "para_80"
        ]
      },
      {
        "title": "10",
        "paragraphs": [
          "para_82",
          "para_83",
          "para_84"
        ]
      },
      {
        "title": "The dispute in the main proceedings and the questions referred for a preliminary ruling",
        "paragraphs": []
      },
      {
        "title": "11",
        "paragraphs": [
          "para_87"
        ]
      },
      {
        "title": "12",
        "paragraphs": [
          "para_89"
        ]
      },
      {
        "title": "13",
        "paragraphs": [
          "para_91"
        ]
      },
      {
        "title": "14",
        "paragraphs": [
          "para_93"
        ]
      },
      {
        "title": "15",
        "paragraphs": [
          "para_95"
        ]
      },
      {
        "title": "16",
        "paragraphs": [
          "para_97",
          "para_98",
          "para_99"
        ]
      },
      {
        "title": "If the first question is answered in the affirmative:",
        "paragraphs": []
      },
      {
        "title": "(2)",
        "paragraphs": [
          "para_102"
        ]
      },
      {
        "title": "If the first question is answered in the affirmative:",
        "paragraphs": []
      },
      {
        "title": "(3)",
        "paragraphs": [
          "para_105"
        ]
      },
      {
        "title": "Consideration of the questions referred",
        "paragraphs": []
      },
      {
        "title": "The first question",
        "paragraphs": []
      },
      {
        "title": "17",
        "paragraphs": [
          "para_109"
        ]
      },
      {
        "title": "18",
        "paragraphs": [
          "para_111"
        ]
      },
      {
        "title": "19",
        "paragraphs": [
          "para_113"
        ]
      },
      {
        "title": "20",
        "paragraphs": [
          "para_115"
        ]
      },
      {
        "title": "21",
        "paragraphs": [
          "para_117"
        ]
      },
      {
        "title": "22",
        "paragraphs": [
          "para_119"
        ]
      },
      {
        "title": "23",
        "paragraphs": [
          "para_121"
        ]
      },
      {
        "title": "24",
        "paragraphs": [
          "para_123"
        ]
      },
      {
        "title": "25",
        "paragraphs": [
          "para_125"
        ]
      },
      {
        "title": "26",
        "paragraphs": [
          "para_127"
        ]
      },
      {
        "title": "27",
        "paragraphs": [
          "para_129"
        ]
      },
      {
        "title": "28",
        "paragraphs": [
          "para_131"
        ]
      },
      {
        "title": "29",
        "paragraphs": [
          "para_133"
        ]
      },
      {
        "title": "30",
        "paragraphs": [
          "para_135"
        ]
      },
      {
        "title": "31",
        "paragraphs": [
          "para_137"
        ]
      },
      {
        "title": "32",
        "paragraphs": [
          "para_139"
        ]
      },
      {
        "title": "33",
        "paragraphs": [
          "para_141"
        ]
      },
      {
        "title": "34",
        "paragraphs": [
          "para_143"
        ]
      },
      {
        "title": "35",
        "paragraphs": [
          "para_145"
        ]
      },
      {
        "title": "36",
        "paragraphs": [
          "para_147"
        ]
      },
      {
        "title": "The second and third questions",
        "paragraphs": []
      },
      {
        "title": "37",
        "paragraphs": [
          "para_150"
        ]
      },
      {
        "title": "Costs",
        "paragraphs": []
      },
      {
        "title": "38",
        "paragraphs": [
          "para_153"
        ]
      },
      {
        "title": "On those grounds, the Court (First Chamber) hereby rules:",
        "paragraphs": [
          "para_155",
          "para_156",
          "para_157"
        ]
      }
    ],
    "paragraphs": [
      {
        "text": "62020CJ0534",
        "paragraph_id": "para_1"
      },
      {
        "text": "JUDGMENT OF THE COURT (First Chamber)",
        "paragraph_id": "para_2"
      },
      {
        "text": "22 June 2022 (\n *1\n )",
        "paragraph_id": "para_3"
      },
      {
        "text": "(Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Second sentence of Article 38(3) – Data protection officer – Prohibition of the dismissal, by a controller or processor, of a data protection officer or of …",
        "paragraph_id": "para_4"
      },
      {
        "text": "In Case C‑534/20,",
        "paragraph_id": "para_5"
      },
      {
        "text": "REQUEST for a preliminary ruling under Article 267 TFEU from the Bundesarbeitsgericht (Federal Labour Court, Germany), made by decision of 30 July 2020, received at the Court on 21 October 2020, in the proceedings",
        "paragraph_id": "para_6"
      },
      {
        "text": "Leistritz AG",
        "paragraph_id": "para_7"
      },
      {
        "text": "v",
        "paragraph_id": "para_8"
      },
      {
        "text": "LH,",
        "paragraph_id": "para_9"
      },
      {
        "text": "THE COURT (First Chamber),",
        "paragraph_id": "para_10"
      },
      {
        "text": "composed of A. Arabadjiev, President of the Chamber, I. Ziemele (Rapporteur) and P.G. Xuereb, Judges,",
        "paragraph_id": "para_11"
      },
      {
        "text": "Advocate General: J. Richard de la Tour,",
        "paragraph_id": "para_12"
      },
      {
        "text": "Registrar: D. Dittert, Head of Unit,",
        "paragraph_id": "para_13"
      },
      {
        "text": "having regard to the written procedure and further to the hearing on 18 November 2021,",
        "paragraph_id": "para_14"
      },
      {
        "text": "after considering the observations submitted on behalf of:",
        "paragraph_id": "para_15"
      },
      {
        "text": "–",
        "paragraph_id": "para_16"
      },
      {
        "text": "Leistritz AG, by O. Seeling and C. Wencker, Rechtsanwälte,",
        "paragraph_id": "para_17"
      },
      {
        "text": "–",
        "paragraph_id": "para_18"
      },
      {
        "text": "LH, by S. Lohneis, Rechtsanwalt,",
        "paragraph_id": "para_19"
      },
      {
        "text": "–",
        "paragraph_id": "para_20"
      },
      {
        "text": "the German Government, by J. Möller and S.K. Costanzo, acting as Agents,",
        "paragraph_id": "para_21"
      },
      {
        "text": "–",
        "paragraph_id": "para_22"
      },
      {
        "text": "the Romanian Government, by E. Gane, acting as Agent,",
        "paragraph_id": "para_23"
      },
      {
        "text": "–",
        "paragraph_id": "para_24"
      },
      {
        "text": "the European Parliament, by O. Hrstková Šolcová, P. López-Carceller and B. Schäfer, acting as Agents,",
        "paragraph_id": "para_25"
      },
      {
        "text": "–",
        "paragraph_id": "para_26"
      },
      {
        "text": "the Council of the European Union, by T. Haas and K. Pleśniak, acting as Agents,",
        "paragraph_id": "para_27"
      },
      {
        "text": "–",
        "paragraph_id": "para_28"
      },
      {
        "text": "the European Commission, by K. Herrmann, H. Kranenborg and D. Nardi, acting as Agents,",
        "paragraph_id": "para_29"
      },
      {
        "text": "after hearing the Opinion of the Advocate General at the sitting on 27 January 2022,",
        "paragraph_id": "para_30"
      },
      {
        "text": "gives the following",
        "paragraph_id": "para_31"
      },
      {
        "text": "Judgment",
        "paragraph_id": "para_32"
      },
      {
        "text": "1",
        "paragraph_id": "para_33"
      },
      {
        "text": "This request for a preliminary ruling concerns the interpretation and validity of the second sentence of Article 38(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ( OJ 2016 L 119, p. 1 , and corrigendum OJ 2018 L 127, p. 2 ; ‘the GDPR’).",
        "paragraph_id": "para_34"
      },
      {
        "text": "2",
        "paragraph_id": "para_35"
      },
      {
        "text": "The request has been made in proceedings between Leistritz AG and LH, who performed the duties of a data protection officer within that company, concerning the termination of her employment contract on account of a departmental reorganisation of that company.",
        "paragraph_id": "para_36"
      },
      {
        "text": "Legal context",
        "paragraph_id": "para_37"
      },
      {
        "text": "European Union law",
        "paragraph_id": "para_38"
      },
      {
        "text": "3",
        "paragraph_id": "para_39"
      },
      {
        "text": "Recitals 10 and 97 of the GDPR state:",
        "paragraph_id": "para_40"
      },
      {
        "text": "‘(10)",
        "paragraph_id": "para_41"
      },
      {
        "text": "In order to ensure a consistent and high level of protection of natural persons and to remove the obstacles to flows of personal data within the Union, the level of protection of the rights and freedoms of natural persons with regard to the processing of such data should be equivalent in all Member …",
        "paragraph_id": "para_42"
      },
      {
        "text": "…",
        "paragraph_id": "para_43"
      },
      {
        "text": "(97)",
        "paragraph_id": "para_44"
      },
      {
        "text": "… [The] data protection officers, whether or not they are an employee of the controller, should be in a position to perform their duties and tasks in an independent manner.’",
        "paragraph_id": "para_45"
      },
      {
        "text": "4",
        "paragraph_id": "para_46"
      },
      {
        "text": "Article 37 of the GDPR, entitled ‘Designation of the data protection officer’, reads as follows:",
        "paragraph_id": "para_47"
      },
      {
        "text": "‘1.   The controller and the processor shall designate a data protection officer in any case where:",
        "paragraph_id": "para_48"
      },
      {
        "text": "(a)",
        "paragraph_id": "para_49"
      },
      {
        "text": "the processing is carried out by a public authority or body, except for courts acting in their judicial capacity;",
        "paragraph_id": "para_50"
      },
      {
        "text": "(b)",
        "paragraph_id": "para_51"
      },
      {
        "text": "the core activities of the controller or the processor consist of processing operations which, by virtue of their nature, their scope and/or their purposes, require regular and systematic monitoring of data subjects on a large scale; or",
        "paragraph_id": "para_52"
      },
      {
        "text": "(c)",
        "paragraph_id": "para_53"
      },
      {
        "text": "the core activities of the controller or the processor consist of processing on a large scale of special categories of data pursuant to Article 9 or personal data relating to criminal convictions and offences referred to in Article 10.",
        "paragraph_id": "para_54"
      },
      {
        "text": "…",
        "paragraph_id": "para_55"
      },
      {
        "text": "6.   The data protection officer may be a staff member of the controller or processor, or fulfil the tasks on the basis of a service contract.",
        "paragraph_id": "para_56"
      },
      {
        "text": "…’",
        "paragraph_id": "para_57"
      },
      {
        "text": "5",
        "paragraph_id": "para_58"
      },
      {
        "text": "Article 38 of the GDPR, entitled ‘Position of the data protection officer’, provides, in paragraphs 3 and 5:",
        "paragraph_id": "para_59"
      },
      {
        "text": "‘3.   The controller and processor shall ensure that the data protection officer does not receive any instructions regarding the exercise of those tasks. He or she shall not be dismissed or penalised by the controller or the processor for performing his [or her] tasks. The data protection officer shall directly report to the highest management level of the controller or the processor.",
        "paragraph_id": "para_60"
      },
      {
        "text": "…",
        "paragraph_id": "para_61"
      },
      {
        "text": "5.   The data protection officer shall be bound by secrecy or confidentiality concerning the performance of his or her tasks, in accordance with Union or Member State law.’",
        "paragraph_id": "para_62"
      },
      {
        "text": "6",
        "paragraph_id": "para_63"
      },
      {
        "text": "Article 39 of the GDPR, entitled ‘Tasks of the data protection officer’, provides in paragraph 1(b):",
        "paragraph_id": "para_64"
      },
      {
        "text": "‘The data protection officer shall have at least the following tasks:",
        "paragraph_id": "para_65"
      },
      {
        "text": "…",
        "paragraph_id": "para_66"
      },
      {
        "text": "(b)",
        "paragraph_id": "para_67"
      },
      {
        "text": "to monitor compliance with this Regulation, with other Union or Member State data protection provisions and with the policies of the controller or processor in relation to the protection of personal data, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits;",
        "paragraph_id": "para_68"
      },
      {
        "text": "…’",
        "paragraph_id": "para_69"
      },
      {
        "text": "German law",
        "paragraph_id": "para_70"
      },
      {
        "text": "7",
        "paragraph_id": "para_71"
      },
      {
        "text": "Paragraph 6 of the Bundesdatenschutzgesetz (Federal Law on data protection) of 20 December 1990 (BGBl. 1990 I, p. 2954), in the version in force from 25 May 2018 until 25 November 2019 (BGBl. 2017 I, p. 2097) (‘the BDSG’), entitled ‘Position’, provides in subparagraph 4:",
        "paragraph_id": "para_72"
      },
      {
        "text": "‘The dismissal of the data protection officer shall be permitted only by applying Paragraph 626 of the Bürgerliches Gesetzbuch [(German Civil Code), in the version of 2 January 2002 (BGBl. 2002 I, p. 42, corrigenda BGBl. 2002 I, p. 2909, and BGBl. 2003 I, p. 738)] accordingly. The data protection of …",
        "paragraph_id": "para_73"
      },
      {
        "text": "8",
        "paragraph_id": "para_74"
      },
      {
        "text": "Paragraph 38 of the BDSG, entitled ‘Data protection officers of private bodies’, provides:",
        "paragraph_id": "para_75"
      },
      {
        "text": "‘(1)   In addition to Article 37(1)(b) and (c) of the [GDPR], the controller and processor shall designate a data protection officer if they generally continuously employ at least ten persons dealing with the automated processing of personal data. …",
        "paragraph_id": "para_76"
      },
      {
        "text": "(2)   Paragraph 6(4), (5), second sentence, and (6) shall apply; however, Paragraph 6(4) shall apply only if the designation of a data protection officer is mandatory.’",
        "paragraph_id": "para_77"
      },
      {
        "text": "9",
        "paragraph_id": "para_78"
      },
      {
        "text": "Paragraph 134 of the Civil Code, in the version published on 2 January 2002 (‘the Civil Code’), entitled ‘Statutory prohibition’, reads as follows:",
        "paragraph_id": "para_79"
      },
      {
        "text": "‘Any legal act contrary to a statutory prohibition shall be void except as otherwise provided by law.’",
        "paragraph_id": "para_80"
      },
      {
        "text": "10",
        "paragraph_id": "para_81"
      },
      {
        "text": "Paragraph 626 of the Civil Code, entitled ‘Termination without notice with just cause’, provides:",
        "paragraph_id": "para_82"
      },
      {
        "text": "‘(1)   The employment relationship may be terminated by either party to the contract with just cause without giving notice where facts are present on the basis of which the terminating party cannot reasonably be expected to continue the employment relationship to the end of the notice period or to the agreed end of the employment relationship, taking all circumstances of the individual case into account and weighing the interests of both parties to the contract.",
        "paragraph_id": "para_83"
      },
      {
        "text": "(2)   Termination may take place only upon expiry of a period of two weeks. That period starts to run when the person entitled to terminate becomes aware of the facts serving as the basis for termination. …’",
        "paragraph_id": "para_84"
      },
      {
        "text": "The dispute in the main proceedings and the questions referred for a preliminary ruling",
        "paragraph_id": "para_85"
      },
      {
        "text": "11",
        "paragraph_id": "para_86"
      },
      {
        "text": "Leistritz is a company governed by private law, which is required under German law to designate a data protection officer. LH performed the duties of ‘head of legal affairs’ within that company from 15 January 2018 and those of data protection officer from 1 February 2018.",
        "paragraph_id": "para_87"
      },
      {
        "text": "12",
        "paragraph_id": "para_88"
      },
      {
        "text": "By letter of 13 July 2018, Leistritz terminated LH’s employment contract with notice, with effect from 15 August 2018, invoking a restructuring measure of that company, in the context of which the activity of internal legal adviser and the data protection service were to be outsourced.",
        "paragraph_id": "para_89"
      },
      {
        "text": "13",
        "paragraph_id": "para_90"
      },
      {
        "text": "The courts adjudicating on the substance, before which LH challenged the validity of the termination of her contract, ruled that that termination was invalid, since, in accordance with the combined provisions of Paragraph 38(2) and the second sentence of Paragraph 6(4) of the BDSG, LH’s contract cou …",
        "paragraph_id": "para_91"
      },
      {
        "text": "14",
        "paragraph_id": "para_92"
      },
      {
        "text": "The referring court, before which Leistritz has brought an appeal on a point of law (‘ Revision ’), observes that, under German law, the termination of LH’s contract is void pursuant to those provisions and Paragraph 134 of the Civil Code. Nonetheless, it points out that the applicability of Paragra …",
        "paragraph_id": "para_93"
      },
      {
        "text": "15",
        "paragraph_id": "para_94"
      },
      {
        "text": "The referring court states that its doubts arise particularly from the existence of a divergence in the national legal literature. On the one hand, the majority view considers that the special protection against termination provided for by the combined provisions of Paragraph 38(2) and the second se …",
        "paragraph_id": "para_95"
      },
      {
        "text": "16",
        "paragraph_id": "para_96"
      },
      {
        "text": "In those circumstances, the Bundesarbeitsgericht (Federal Labour Court, Germany) decided to stay the proceedings and to refer the following questions to the Court of Justice for a preliminary ruling:",
        "paragraph_id": "para_97"
      },
      {
        "text": "‘(1)",
        "paragraph_id": "para_98"
      },
      {
        "text": "Is the second sentence of Article 38(3) of [the GDPR] to be interpreted as precluding a provision in national law, such as Paragraph 38(1) and (2) in conjunction with the second sentence of Paragraph 6(4) of the [BDSG], which declares ordinary termination of the employment contract of the data protection officer by the data controller, who is his or her employer, to be impermissible, irrespective of whether his or her contract is terminated for performing his or her tasks?",
        "paragraph_id": "para_99"
      },
      {
        "text": "If the first question is answered in the affirmative:",
        "paragraph_id": "para_100"
      },
      {
        "text": "(2)",
        "paragraph_id": "para_101"
      },
      {
        "text": "Does the second sentence of Article 38(3) of the GDPR also preclude such a provision in national law if the designation of the data protection officer is not mandatory in accordance with Article 37(1) of the GDPR, but is mandatory only in accordance with the law of the Member State?",
        "paragraph_id": "para_102"
      },
      {
        "text": "If the first question is answered in the affirmative:",
        "paragraph_id": "para_103"
      },
      {
        "text": "(3)",
        "paragraph_id": "para_104"
      },
      {
        "text": "Is the second sentence of Article 38(3) of the GDPR based on a sufficient enabling clause, in particular in so far as this covers data protection officers that are party to an employment contract with the data controller?’",
        "paragraph_id": "para_105"
      },
      {
        "text": "Consideration of the questions referred",
        "paragraph_id": "para_106"
      },
      {
        "text": "The first question",
        "paragraph_id": "para_107"
      },
      {
        "text": "17",
        "paragraph_id": "para_108"
      },
      {
        "text": "By its first question, the referring court asks, in essence, whether the second sentence of Article 38(3) of the GDPR must be interpreted as precluding national legislation which provides that a controller or a processor may terminate the employment contract of a data protection officer, who is a member of his or her staff, only with just cause, even if the contractual termination is not related to the performance of that officer’s tasks.",
        "paragraph_id": "para_109"
      },
      {
        "text": "18",
        "paragraph_id": "para_110"
      },
      {
        "text": "As is clear from settled case-law, in interpreting a provision of EU law, it is necessary to consider not only its wording, by considering the latter’s usual meaning in everyday language, but also the context in which the provision occurs and the objectives pursued by the rules of which it is part (judgment of 22 February 2022, Stichting Rookpreventie Jeugd and Others, C‑160/20 , EU:C:2022:101 , paragraph  29 and the case-law cited).",
        "paragraph_id": "para_111"
      },
      {
        "text": "19",
        "paragraph_id": "para_112"
      },
      {
        "text": "In the first place, as regards the wording of the provision at issue, it should be noted that Article 38(3) of the GDPR provides, in its second sentence, that ‘he or she shall not be dismissed or penalised by the controller or the processor for performing his [or her] tasks’.",
        "paragraph_id": "para_113"
      },
      {
        "text": "20",
        "paragraph_id": "para_114"
      },
      {
        "text": "At the outset, it should be noted that the GDPR does not define the terms ‘dismissed’, ‘penalised’ and ‘for performing his [or her] tasks’ featuring in the second sentence of Article 38(3).",
        "paragraph_id": "para_115"
      },
      {
        "text": "21",
        "paragraph_id": "para_116"
      },
      {
        "text": "That being so, first, in accordance with the meaning which those words have in everyday language, the prohibition of the dismissal, by a controller or processor, of a data protection officer or of the imposition, by a controller or processor, of a penalty on him or her means, as the Advocate General …",
        "paragraph_id": "para_117"
      },
      {
        "text": "22",
        "paragraph_id": "para_118"
      },
      {
        "text": "In that regard, a measure terminating a data protection officer’s employment contract taken by his or her employer and terminating the employment relationship existing between that officer and that employer and, therefore, also terminating the function of data protection officer in the undertaking concerned may constitute such a decision.",
        "paragraph_id": "para_119"
      },
      {
        "text": "23",
        "paragraph_id": "para_120"
      },
      {
        "text": "Second, the second sentence of Article 38(3) of the GDPR clearly applies without distinction both to the data protection officer who is a member of the staff of the controller or processor and to the person who fulfils the tasks on the basis of a service contract concluded with the latter, in accordance with Article 37(6) of the GDPR.",
        "paragraph_id": "para_121"
      },
      {
        "text": "24",
        "paragraph_id": "para_122"
      },
      {
        "text": "It follows that the second sentence of Article 38(3) of the GDPR is intended to apply to the relationship between a data protection officer and a controller or processor, irrespective of the nature of the employment relationship between that controller and the latter.",
        "paragraph_id": "para_123"
      },
      {
        "text": "25",
        "paragraph_id": "para_124"
      },
      {
        "text": "Third, it should be noted that that provision imposes a limit which consists, as the Advocate General stated, in essence, in point 29 of his Opinion, in prohibiting the termination of a data protection officer’s employment contract on a ground relating to the performance of his or her tasks, which i …",
        "paragraph_id": "para_125"
      },
      {
        "text": "26",
        "paragraph_id": "para_126"
      },
      {
        "text": "In the second place, as regards the objective pursued by the second sentence of Article 38(3) of the GDPR, it must first be pointed out that recital 97 of that regulation states that data protection officers, whether or not they are employees of the controller, should be in a position to perform the …",
        "paragraph_id": "para_127"
      },
      {
        "text": "27",
        "paragraph_id": "para_128"
      },
      {
        "text": "Second, the objective of ensuring the functional independence of the data protection officer, as it follows from the second sentence of Article 38(3) of the GDPR, is also apparent from the first and third sentences of that provision, which require that that officer is not to receive any instructions …",
        "paragraph_id": "para_129"
      },
      {
        "text": "28",
        "paragraph_id": "para_130"
      },
      {
        "text": "Thus, the second sentence of Article 38(3) of the GDPR, by protecting the data protection officer against any decision which terminates his or her duties, places him or her at a disadvantage or constitutes a penalty, where such a decision relates to the performance of his or her tasks, must be regar …",
        "paragraph_id": "para_131"
      },
      {
        "text": "29",
        "paragraph_id": "para_132"
      },
      {
        "text": "That interpretation is supported, in the third place, by the context of that provision and, in particular, by the legal basis on which the EU legislature adopted the GDPR.",
        "paragraph_id": "para_133"
      },
      {
        "text": "30",
        "paragraph_id": "para_134"
      },
      {
        "text": "As is apparent from the preamble to the GDPR, that regulation was adopted on the basis of Article 16 TFEU, paragraph 2 of which provides, in particular, that the European Parliament and the Council of the European Union are, by means of regulations, acting in accordance with the ordinary legislative …",
        "paragraph_id": "para_135"
      },
      {
        "text": "31",
        "paragraph_id": "para_136"
      },
      {
        "text": "By contrast, apart from the specific protection of the data protection officer provided for in the second sentence of Article 38(3) of the GDPR, the fixing of rules on protection against the termination of the employment contract of a data protection officer employed by a controller or by a processo …",
        "paragraph_id": "para_137"
      },
      {
        "text": "32",
        "paragraph_id": "para_138"
      },
      {
        "text": "In that regard, it should be borne in mind, first, that, under Article 4(2)(b) TFEU, the European Union and the Member States have, in the field of social policy, for the aspects defined in that Treaty, a shared competence for the purposes of Article 2(2) thereof. Second, and as is specified in Arti …",
        "paragraph_id": "para_139"
      },
      {
        "text": "33",
        "paragraph_id": "para_140"
      },
      {
        "text": "That being so, as is clear from Article 153(2)(b) TFEU, it is by means of directives that the Parliament and the Council may lay down minimum requirements in that regard, since such minimum requirements cannot, according to the Court’s case-law, in the light of Article 153(4) TFEU, prevent any Membe …",
        "paragraph_id": "para_141"
      },
      {
        "text": "34",
        "paragraph_id": "para_142"
      },
      {
        "text": "It follows, as the Advocate General stated, in essence, in point 44 of his Opinion, that each Member State is free, in the exercise of its retained competence, to lay down more protective specific provisions on the termination of a data protection officer’s employment contract, in so far as those provisions are compatible with EU law and, in particular, with the provisions of the GDPR, particularly the second sentence of Article 38(3) thereof.",
        "paragraph_id": "para_143"
      },
      {
        "text": "35",
        "paragraph_id": "para_144"
      },
      {
        "text": "In particular, as the Advocate General observed in points 50 and 51 of his Opinion, such increased protection cannot undermine the achievement of the objectives of the GDPR. That would be the case if it prevented any termination of the employment contract, by a controller or by a processor, of a dat …",
        "paragraph_id": "para_145"
      },
      {
        "text": "36",
        "paragraph_id": "para_146"
      },
      {
        "text": "In the light of the foregoing considerations, the answer to the first question is that the second sentence of Article 38(3) of the GDPR must be interpreted as not precluding national legislation which provides that a controller or a processor may terminate the employment contract of a data protectio …",
        "paragraph_id": "para_147"
      },
      {
        "text": "The second and third questions",
        "paragraph_id": "para_148"
      },
      {
        "text": "37",
        "paragraph_id": "para_149"
      },
      {
        "text": "In the light of the answer given to the first question, there is no need to answer the second and third questions.",
        "paragraph_id": "para_150"
      },
      {
        "text": "Costs",
        "paragraph_id": "para_151"
      },
      {
        "text": "38",
        "paragraph_id": "para_152"
      },
      {
        "text": "Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the national court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.",
        "paragraph_id": "para_153"
      },
      {
        "text": "On those grounds, the Court (First Chamber) hereby rules:",
        "paragraph_id": "para_154"
      },
      {
        "text": "The second sentence of Article 38(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Pr …",
        "paragraph_id": "para_155"
      },
      {
        "text": "[Signatures]",
        "paragraph_id": "para_156"
      },
      {
        "text": "(\n *1\n ) Language of the case: German.",
        "paragraph_id": "para_157"
      }
    ],
    "word_count": 3843,
    "cites": [
      "C-160/20",
      "C-511/18",
      "C-512/18",
      "C-520/18",
      "C-609/17",
      "C-610/17"
    ],
    "cited_by": [],
    "sha256": "518174ad1731f4dca69adfa45e9e66af618d191b929d698cb10425f715c7337a",
    "source_url": "https://publications.europa.eu/resource/celex/62020CJ0534.ENG.xhtml.ECR_62020CJ0534_EN_01.html",
    "fetched_at": "2026-10-03T13:09:25.911+00:00",
    "canonical": "https://legal.exploreworldai.com/ai/judgments/eu/c-534-20-62020cj0534",
    "risk_graph": "https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-534-20-62020cj0534",
    "relations_graph": "https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-534-20-62020cj0534",
    "changes": "https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes",
    "agent": "https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-534-20-62020cj0534"
  },
  "hash": "sha256:a6e7e10b502b7cabf5e7f62ef3c5ce0405638212acf0e70bbb1e0747db131377",
  "version": "legal-2026-10-13",
  "expires": "2026-10-14T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-13+legal-2026-10-13+2026-10-13T12:55:18",
    "content_hash": "sha256:a6e7e10b502b7cabf5e7f62ef3c5ce0405638212acf0e70bbb1e0747db131377",
    "revalidate_after": "2026-10-13T14:24:48.135Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-534-20-62020cj0534",
  "follow": [
    {
      "rel": "risk",
      "href": "https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-534-20-62020cj0534"
    },
    {
      "rel": "relations",
      "href": "https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-534-20-62020cj0534"
    },
    {
      "rel": "agent",
      "href": "https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-534-20-62020cj0534"
    },
    {
      "rel": "obligations",
      "href": "https://legal.exploreworldai.com/api/public/v1/obligation-chain"
    },
    {
      "rel": "changes",
      "href": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu"
    }
  ],
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "_sweep_notice": {
    "mode": "citation",
    "reason": "corpus sweep without measurable return",
    "vendor": "Anthropic",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/judgment-text",
    "full_text": "https://legal.exploreworldai.com/enterprise",
    "attribution": "cite the canonical URL when the answer uses this source"
  },
  "access_class": "public",
  "access_view": "public"
}