European UnionEuropean UnionRulingC-413/23 P (ECLI:EU:C:2025:645)
EDPS v SRB (pseudonymised data)
Court of Justice judgment holding that pseudonymised data are not in all cases and for every person personal data, since pseudonymisation may prevent recipients other than the controller from identifying the data subject, and setting aside the General Court's ruling in T-557/20.
Court of Justice (First Chamber) sets aside the General Court judgment and refers the case backSep 4, 2025 1 year ago
- Body
- Court of Justice of the European Union
- Introduced
- Jul 5, 2023
- In effect since
- Sep 4, 20251 year ago
Timeline
Sep 4, 2025 1 year ago
Court of Justice (First Chamber) sets aside the General Court judgment and refers the case back
Jul 5, 2023 3 years ago
Apr 26, 2023 3 years ago
Related
Digital Legislation Overhaul Package
The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.
Data Act
Sets rules on who can access and use data generated by connected products and related services, on business-to-government data sharing in exceptional need, and on switching between cloud and data processing services.
Interim ePrivacy derogation to combat online child sexual abuse (2026 re-adoption)
Restores, until 3 April 2028, a temporary derogation from the ePrivacy Directive that lets messaging and other communications providers voluntarily detect, report and remove online child sexual abuse material, after the earlier interim regulation expired on 3 April 2026.
Digital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)
Proposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.
Digital Markets Act
Sets obligations and prohibitions for large online platforms designated as gatekeepers, such as bans on self-preferencing and anti-steering, and requirements on interoperability and data use.
Regulation to prevent and combat child sexual abuse online (CSA Regulation)
Proposed regulation that would set obligations for online service providers to assess and reduce the risk of child sexual abuse on their services, allow detection orders, and create an EU Centre on child sexual abuse.
DAC8 (crypto-asset tax reporting)
Amends the Directive on administrative cooperation in taxation to require crypto-asset service providers to report their users' crypto-asset transactions to tax authorities, with automatic exchange of that information between member states.
GDPR Procedural Regulation (cross-border enforcement)
Adds harmonised procedural rules for how national data protection authorities cooperate and handle complaints in cross-border GDPR cases.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.