Court of Justice 20 March 2025, C-655/23 (IP v Quirin Privatbank AG.)

Also known as

The Advocate General's opinion addresses whether a data subject can require a data controller to cease future unlawful processing of personal data under the General Data Protection Regulation (GDPR), particularly in light of prior unlawful disclosures. It interprets Articles 17 and 18 of the GDPR, suggesting that a right to seek a prohibitory injunction against further unlawful processing may be inferred from the principles of lawful processing outlined in Articles 5 and 6. Additionally, the opinion discusses the implications of such a right on claims for non-material damages under Article 82, emphasizing the need for judicial mechanisms to protect data subjects' rights.AI