The Court of Justice of the European Union ruled a member state's data protection authority is legally authorized to order the deletion of an individual's personal information without a formal complaint to the DPA from the data subject under the EU General Data Protection Regulation. The decision was made following a request for interpretation of Hungary's Budapest High Court after a municipal government asked the Hungarian State Treasury for residents' personal information for the purpose of issuing COVID-19 relief funds.
14 March 2024
CJEU rules DPAs can order data deletion without complaint
RELATED STORIES
Controllers, processors and subprocessors in chains
Notes from the IAPP Canada: Recommendations, calls to reform Privacy Act 'a good start'
A view from DC: Marriott and the minimum extent necessary
Retrospective: 2024 in state sectoral privacy law and AI law
Notes from the Asia-Pacific region: India's PM talks global governance for digital technology