• Mehr als 3 Millionen Wörter Inhalt
  • |
  • info@itmedialaw.com
  • |
  • Tel: 03322 5078053
Rechtsanwalt Marian Härtel - ITMediaLaw

No products in the cart.

  • en English
  • de Deutsch
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Kurzberatung
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Rechtsanwalt Marian Härtel - ITMediaLaw

ECJ ruling on the GDPR: Consequences and recommendations for action for companies processing personal data

15. May 2023
in Data protection Law
Reading Time: 4 mins read
0 0
A A
0
20200427 Eugh Diskr o Person
Key Facts
  • The GDPR has fundamentally changed corporate practices for processing personal data.
  • The ECJ ruling (C-300/21) specifies claims for damages in the event of data protection violations.
  • Three conditions must be met for claims for damages: breach, damage and causation.
  • Companies should review their data protection practices to minimize legal risks.
  • A data protection officer should be appointed to monitor compliance.
  • Transparent communication about data usage can strengthen customer trust.
  • Preventive measures are crucial to avoid future GDPR violations.

The General Data Protection Regulation (GDPR) has fundamentally changed the way companies handle personal data. It has set new standards for transparency, accountability and individual rights in relation to the processing of personal data. A recent ruling by the European Court of Justice (ECJ), Case C-300/21, clarified some important aspects of the GDPR. This ruling dealt in particular with the conditions for claims for damages in the event of breaches of the GDPR. It thus provides important clarification and guidance for companies that process personal data. In the ever-evolving digital landscape, it is critical that companies understand the current legal framework and rulings in order to meet their obligations and maintain the trust of their customers.

Content Hide
1. The ECJ ruling C-300/21: What is at stake?
2. Claims for damages and the GDPR: What does the ruling say?
3. The relevance of the ECJ ruling for companies
4. Consequences of action for companies that process personal data
5. Preventive measures for companies in handling personal data
5.1. Author: Marian Härtel

The ECJ ruling C-300/21: What is at stake?

The case concerns Austrian Post, which collected information on the political preferences of the Austrian population without the explicit consent of the persons concerned. It used an algorithm to define target group addresses and deduce that a particular citizen might have a high affinity for a particular political party. This practice constituted a violation of the General Data Protection Regulation, as the data were collected and processed without the explicit consent of the data subject. A citizen whose data was used in this way felt that his rights had been violated. He claimed to have suffered immaterial damage in the form of annoyance, loss of confidence and a feeling of being exposed as a result of this data processing and demanded compensation of 1,000 euros.

Claims for damages and the GDPR: What does the ruling say?

The ECJ ruling stated that a claim for damages is subject to three cumulative conditions: a breach of the GDPR, resulting material or immaterial damage, and a causal link between the damage and the breach. Not every breach of the GDPR automatically leads to a claim for damages. Moreover, the non-material damage does not have to reach a certain level of severity to constitute a claim for damages.

The relevance of the ECJ ruling for companies

This ruling is of great importance for companies, as it clearly defines the framework for possible claims for damages in the event of violations of the GDPR. It clarifies that not every breach of the GDPR automatically leads to a claim for damages, but that there must be a direct causal link between the breach and any resulting material or immaterial damage. In addition, the ruling underscores the need for companies to adhere to strict data protection practices to ensure compliance with the GDPR and avoid potential legal consequences.

The decision also sets a precedent for other similar proceedings, including those that could affect large tech companies like Facebook. It provides a legal basis for future cases in which users wish to claim damages for violations of the GDPR. It is therefore very likely that this ruling will be used as a reference in future court proceedings and in the assessment of data protection violations. It should therefore serve as a wake-up call for all companies that process personal data to review their data protection practices and ensure that they respect the rights of data subjects

Consequences of action for companies that process personal data

Companies that process personal data should take this ruling as an opportunity to review their data protection practices and make any necessary adjustments. A key recommendation is to implement mechanisms to review and update data processing consents. It is essential to keep data subjects’ consent up to date while communicating clearly and understandably how their data will be used.

Furthermore, companies should design their processes to identify and document any potential negative impact of their data processing activities on individuals. This is of great importance, as the ruling underlines that a direct causal link between the infringement and damage must be proven in order to claim damages.

In addition, the introduction of a comprehensive and easily accessible complaints and redress procedure could be beneficial. This should allow affected individuals to raise concerns and claim compensation if they believe their rights have been violated. Companies should also consider that the level of transparency they provide to affected individuals can have a direct impact on their trust and satisfaction. It is therefore advisable to communicate proactively and openly about data protection practices and to promote a culture of data protection responsibility.

Preventive measures for companies in handling personal data

To avoid future breaches of the GDPR and potential claims for damages, companies should take a number of preventive measures:

  1. Increase awareness and training: Employees should be regularly trained and kept up to date on the latest GDPR regulations and practices. This helps to avoid potential data breaches and create awareness of the importance of data protection within the company.
  2. Data protection officer: Companies should appoint a data protection officer who is responsible for monitoring data protection practices and policies. This person should also be the contact person for data protection issues, both internally and for data subjects.
  3. Data protection impact assessment: A data protection impact assessment should be carried out for new projects or changes that affect the processing of personal data. This can help identify and mitigate potential risks.
  4. Transparency and communication: Companies should communicate clearly and transparently about their data processing practices. Data subjects should have easy access to information and know how to exercise their rights under the GDPR.

The ECJ’s ruling in Case C-300/21 provides important guidance for companies when processing personal data. Now is the time to review data protection practices and ensure they meet the requirements of the GDPR to avoid potential legal consequences. It is clear that compliance with the GDPR is not only a legal requirement, but also an important step in ensuring the trust of customers and the public.

Marian Härtel
Author: Marian Härtel

Marian Härtel ist Rechtsanwalt und Fachanwalt für IT-Recht mit einer über 25-jährigen Erfahrung als Unternehmer und Berater in den Bereichen Games, E-Sport, Blockchain, SaaS und Künstliche Intelligenz. Seine Beratungsschwerpunkte umfassen neben dem IT-Recht insbesondere das Urheberrecht, Medienrecht sowie Wettbewerbsrecht. Er betreut schwerpunktmäßig Start-ups, Agenturen und Influencer, die er in strategischen Fragen, komplexen Vertragsangelegenheiten sowie bei Investitionsprojekten begleitet. Dabei zeichnet sich seine Beratung durch einen interdisziplinären Ansatz aus, der juristische Expertise und langjährige unternehmerische Erfahrung miteinander verbindet. Ziel seiner Tätigkeit ist stets, Mandanten praxisorientierte Lösungen anzubieten und rechtlich fundierte Unterstützung bei der Umsetzung innovativer Geschäftsmodelle zu gewährleisten.

Tags: CustomizationFacebookGeneral Data Protection RegulationInformationJudgmentsPersonal dataPrivacyRegulation

Weitere spannende Blogposts

ECJ: Goods from Israeli-occupied territories must be labeled

Publication of sales advertisements and classification as a trader
7. November 2022

Guiding principle? Foodstuffs from territories occupied by the State of Israel must indicate their area of origin and, if they...

Read moreDetails

Publication of sales advertisements and classification as a trader

Publication of sales advertisements and classification as a trader
7. November 2022

According to the ECJ, if someone publishes several sales advertisements on a website, this does not automatically establish the activity...

Read moreDetails

ECJ rulings on compensation for data protection breaches

District Court Frankfurt a.M. on the right to be forgotten
26. June 2024

Analysis of the ECJ rulings In its recent decisions C-687/21 and C-340/21, the European Court of Justice (ECJ) provided important...

Read moreDetails

Guide: Advertising labelling in social media offers

Guide: Advertising labelling in social media offers
24. April 2019

Now I have already written many times about the topic of influencers, separation bids or advertising labels in the blog...

Read moreDetails

BVerwG with respect to an attachment order against DENIC

BVerwG with respect to an attachment order against DENIC
8. October 2019

For many companies, the domain is now a great intangible value. Particularly relevant domains are sold on marketplaces such as...

Read moreDetails

Likes may not be used after company change

Customer reviews through sweepstakes? Warning!
6. September 2019

In the meantime, there are more and more judgments that deal with when and under what circumstances likes, fans or...

Read moreDetails

Influencer: Kammergericht mitigates LG Berlin

Brief reminder: Influencer as target of warning letters
7. November 2022

In the meantime, you can also find some explanations on my blog about case law concerning influencers. Just scroll down...

Read moreDetails

Blockchain and DLT technology: How they promote democracy and strengthen DAOs’ right of participation

Blockchain and DLT technology: How they promote democracy and strengthen DAOs’ right of participation
12. April 2023

In this blog post, I venture a thought experiment and gather opinions to find out whether the use of blockchain...

Read moreDetails

Attempt of cybergrooming to become punishable by law

versuch des cybergrooming soll strafbar werden 2
7. November 2022

Cybergrooming is the targeted response of children on the Internet with the aim of initiating sexual contacts. Cybergrooming is punishable...

Read moreDetails
Startup ohne Entwickler?
Gloss / Opinion

Startup ohne Entwickler?

8. July 2025

Es ist spätabends, der Kaffee neben dem Laptop ist längst kalt, doch ich lächle zufrieden: In wenigen Stunden habe ich...

Read moreDetails
Keine stillschweigende AGB-Änderung – Schweigen gilt nicht als Zustimnung

Keine stillschweigende AGB-Änderung – Schweigen gilt nicht als Zustimnung

7. July 2025
So langsam nimmt der Shop Form an

So langsam nimmt der Shop Form an

3. July 2025
Dark Patterns: UX-Tricks im Visier von Gesetzgeber und Gerichten

Dark Patterns: UX-Tricks im Visier von Gesetzgeber und Gerichten

2. July 2025
Altersverifikation im Internet: Pflichten für Anbieter in Deutschland und Europa

Altersverifikation im Internet: Pflichten für Anbieter in Deutschland und Europa

30. June 2025

Podcastfolge

Rechtssichere Influencer-Agentur-Verträge: Strategien zur Vermeidung unerwarteter Kündigungen

Rechtssichere Influencer-Agentur-Verträge: Strategien zur Vermeidung unerwarteter Kündigungen

19. April 2025

Anna und Max sprechen in dieser Episode über typische Fallstricke und Gestaltungsmöglichkeiten bei Verträgen zwischen Influencern und Agenturen. Im Mittelpunkt...

Read moreDetails
Rechtliche Risiken bei langen Entwicklungszeiten und der Stornierung von Crowdfundingspielen

Rechtliche Risiken bei langen Entwicklungszeiten und der Stornierung von Crowdfundingspielen

20. April 2025
Startups und Innovation in Deutschland – Herausforderungen und Chancen

Startups und Innovation in Deutschland – Herausforderungen und Chancen

25. September 2024
KI im Recht: Chancen, Risiken und Regulierung – der IT Media Law Podcast Episode 3

KI im Recht: Chancen, Risiken und Regulierung – der IT Media Law Podcast Episode 3

28. August 2024
Rechtskette beim Spieleentwickler

Rechtskette beim Spieleentwickler

19. April 2025

Video

Mein transparente Abrechnung

Mein transparente Abrechnung

10. February 2025

In diesem Video rede ich ein wenig über transparente Abrechnung und wie ich kommuniziere, was es kostet, wenn man mit...

Read moreDetails
Faszination zwischen und Recht und Technologie

Faszination zwischen und Recht und Technologie

10. February 2025
Meine zwei größten Herausforderungen sind?

Meine zwei größten Herausforderungen sind?

10. February 2025
Was mich wirklich freut

Was mich wirklich freut

10. February 2025
Was ich an meinem Job liebe!

Was ich an meinem Job liebe!

10. February 2025
  • Privacy policy
  • Imprint
  • Contact
  • About lawyer Marian Härtel
Marian Härtel, Rathenaustr. 58a, 14612 Falkensee, info@itmedialaw.com

Marian Härtel - Rechtsanwalt für IT-Recht, Medienrecht und Startups, mit einem Fokus auf innovative Geschäftsmodelle, Games, KI und Finanzierungsberatung.

Welcome Back!

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
  • en English
  • de Deutsch
Kostenlose Kurzberatung