The Court of Justice of the European Union ruled a member state's data protection authority is legally authorized to order the deletion of an individual's personal information without a formal complaint to the DPA from the data subject under the EU General Data Protection Regulation. The decision was made following a request for interpretation of Hungary's Budapest High Court after a municipal government asked the Hungarian State Treasury for residents' personal information for the purpose of issuing COVID-19 relief funds.
14 March 2024
CJEU rules DPAs can order data deletion without complaint
RELATED STORIES
A view from DC: Our data, ourselves
Notes from the IAPP Canada: Privacy law teaching, training and turkey
Notes from the Asia-Pacific region: Quiet, contemplation follows introduction of initial Australia Privacy Act reforms
A view from Brussels: Trans-Atlantic transfers deal gets thumbs-up as adequacy remains a strategic priority
US courts, regulators weigh in on online tracking in health care