Court of Justice 22 February 2024, C-693/22 (Opinion of Advocate General Pikamäe delivered on 22 February 2024.)

Also known as

The Advocate General's opinion addresses whether the sale of a database containing personal data during enforcement proceedings complies with the General Data Protection Regulation (GDPR) when data subjects have not consented to such a sale. The opinion highlights the need to interpret key GDPR provisions, including the definitions of 'controller' and the principles of lawful processing and purpose limitation, in relation to the enforcement of civil law claims. Ultimately, the opinion suggests that the legality of such a sale hinges on the compatibility of the processing with GDPR requirements and the absence of user consent.AI