We use cookies to enhance your user experience and analyze our traffic. See also our Privacy Policy.

✕

Customize preferences

We respect your right to privacy. You can choose not to allow some types of cookies. Your cookie preferences will apply across our website.


Necessary

These cookies are required for the functionality of our website and cannot be switched off.

Analytics

We use these cookies to provide statistical information about our website - they are used for performance measurement and improvement. This help us improve the site by tracking which pages are most popular and how visitors move around.

background

News & Insights

post image
ECJ Gender Registration

EU Court Affirms Right to Correct Gender Registration without Proof of Surgery

On 13 March 2025, the European Court of Justice (ECJ) ruled in case C-247/23 (Deldits) that individuals who are transgender have the right to have their gender marker corrected in official records without the need to prove they have undergone gender-affirming surgery. The court clarified that such a requirement would violate fundamental rights enshrined in the EU Charter of Fundamental Rights and the European Convention on Human Rights.

Mar 2025
post image
Automated Decision-making AI

ECJ Strengthens Transparency in Automated Decision-Making

On 27 February 2025, the European Court of Justice (ECJ) issued a landmark ruling in case C-203/22 affirming that organizations using automated decision-making systems—including AI-driven scoring models—must provide data subjects with clear, precise, and comprehensible information about the logic behind such processes. The judgment emphasizes that affected individuals have the right to understand how decisions concerning them are reached under Article 15(1)(h) GDPR.

Feb 2025
post image
RightsEnforcement Supervisory Authorities

ECJ: Supervisory Authorities Cannot Limit GDPR Complaints by Quota

On 9 January 2025, the European Court of Justice (ECJ) held in case C-416/23 that national data protection authorities may not impose blanket limits on the number of GDPR complaints a data subject can file, unless there is evidence of abusive intent. The ruling overturned an Austrian Data Protection Authority policy that restricted individuals to a maximum of two valid complaints per month—regardless of any potential repeated violations.

Jan, 2025