{"id":2498,"date":"2024-11-29T09:20:47","date_gmt":"2024-11-29T07:20:47","guid":{"rendered":"https:\/\/lexcovery.com\/2024\/11\/judgment-of-the-court-third-chamber-of-28-november-2024-nemzeti-adatvedelmi-es-informacioszabadsag-hatosag-v-uc-reference-for-a-preliminary-ruling-protection-of-natural-persons-with-regard\/"},"modified":"2024-11-29T09:20:47","modified_gmt":"2024-11-29T07:20:47","slug":"judgment-of-the-court-third-chamber-of-28-november-2024-nemzeti-adatvedelmi-es-informacioszabadsag-hatosag-v-uc-reference-for-a-preliminary-ruling-protection-of-natural-persons-with-regard","status":"publish","type":"post","link":"https:\/\/lexcovery.com\/en\/2024\/11\/judgment-of-the-court-third-chamber-of-28-november-2024-nemzeti-adatvedelmi-es-informacioszabadsag-hatosag-v-uc-reference-for-a-preliminary-ruling-protection-of-natural-persons-with-regard\/","title":{"rendered":"Judgment of the Court (Third Chamber) of 28 November 2024.Nemzeti Adatv\u00e9delmi \u00e9s Inform\u00e1ci\u00f3szabads\u00e1g Hat\u00f3s\u00e1g v UC.Reference for a preliminary ruling \u2013 Protection of natural persons with regard to the processing of personal data and the free movement of such data \u2013 Regulation (EU) 2016\/679 \u2013 Data processed when drawing up a COVID-19 certificate \u2013 Data not collected from the data subject \u2013 Information to be provided \u2013 Exception to the obligation to provide information \u2013 Article 14(5)(c) \u2013 Data generated by the controller in the context of its own processes \u2013 Right to complain \u2013 Competence of the supervisory authority \u2013 Article 77(1) \u2013 Appropriate measures to protect the data subject\u2019s legitimate interests provided for by the Member State law to which the controller is subject \u2013 Measures relating to the security of data processing \u2013 Article 32.Case C-169\/23."},"content":{"rendered":"<p>This judgment concerns the interpretation of the EU General Data Protection Regulation (GDPR) regarding the processing of personal data when issuing COVID-19 immunity certificates.The key points of the judgment are:1. The exception to the controller&#8217;s obligation to provide information to data subjects (under Article 14(5)(c) GDPR) applies to all personal data not collected directly from the data subject, including both data obtained from other sources and data generated by the controller itself.2. When handling complaints, data protection authorities can verify whether national laws provide appropriate measures to protect data subjects&#8217; interests when applying this exception. The verification should ensure the law guarantees at least equivalent protection to what Article 14 GDPR would provide.3. However, when verifying compliance with Article 14(5)(c), authorities do not need to check the technical security measures required under Article 32 GDPR, as these are separate obligations.The judgment is particularly relevant for public authorities processing personal data for COVID-19 certificates and similar documents, clarifying their obligations regarding information provision and data subject rights.<\/p>\n<p><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/AUTO\/?uri=CELEX:62023CJ0169\"><strong>Full text by link<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This judgment concerns the interpretation of the EU General Data Protection Regulation (GDPR) regarding the processing of personal data when issuing COVID-19 immunity certificates.The key points of the judgment are:1. The exception to the controller&#8217;s obligation to provide information to data subjects (under Article 14(5)(c) GDPR) applies to all personal data not collected directly from&hellip;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"pmpro_default_level":"","footnotes":""},"categories":[13,42],"tags":[],"class_list":["post-2498","post","type-post","status-publish","format-standard","hentry","category-eu-legislation-general-en","category-eu-legislation-important","pmpro-has-access"],"acf":{"patreon-level":0},"_links":{"self":[{"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/posts\/2498","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/comments?post=2498"}],"version-history":[{"count":0,"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/posts\/2498\/revisions"}],"wp:attachment":[{"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/media?parent=2498"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/categories?post=2498"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lexcovery.com\/en\/wp-json\/wp\/v2\/tags?post=2498"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}