62021CJ0180_SUM
Case C‑180/21
VS
v
Inspektor v Inspektorata kam Visshia sadeben savet
(Request for a preliminary rulingfrom the Administrativen sad – Blagoevgrad)
Judgment of the Court (Fifth Chamber) of 8 December 2022
(Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Articles 2, 4 and 6 – Applicability of Regulation 2016/679 – Concept of ‘legitimate interest’ – Concept of ‘task carried out in the public interest or in the exercise of official authority’ – Directive (EU) 2016/680 – Articles 1, 3, 4, 6 and 9 – Lawfulness of the processing of personal data collected in the course of a criminal investigation – Subsequent processing of data relating to a presumed victim of a criminal offence for the purpose of making a formal accusation in respect of him or her – Concept of purpose ‘other than that for which the personal data are collected’ – Data used by the public prosecutor’s office of a Member State for the purposes of its defence in an action for damages against the State)
Approximation of laws – Protection of natural persons with regard to the processing of personal data in criminal matters – Directive 2016/680 – Processing of personal data serving a purpose other than that of the collection of those data – Collection of data for the purposes of the detection of a criminal offence and the criminal investigation – Person considered to be a victim at the time of the collection – Data processing for the purposes of the prosecution of that person following the conclusion of the criminal investigation – Several purposes – Lawfulness of that processing – Conditions
(European Parliament and Council Directive 2016/680, recitals 10, 11, 12, 27, 29 and Arts 1(1), 4(2), and 6)
(see paragraphs 42-63, operative part 1)
Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Scope – Concept of the processing of personal data – Production of files relating to procedures – Included
(European Parliament and Council Regulation 2016/679, Art. 4(1) and (2))
(see paragraphs 69-72)
Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Scope – Processing of personal data by the public prosecutor’s office of a Member State for the purpose of exercising its rights of defence in an action for damages against the State – Files opened for the purposes set out in Article 1(1) of Directive 2016/680 – Included – Conditions
(European Parliament and Council Regulation 2016/679, recital 19 and Arts 2(1) and (2)(a) and (d), and 4(1), (2) and (7); European Parliament and Council Directive 2016/680, recital 12 and Arts 1(1), 3(7)(a) and (8), and 9(1) and (2))
(see paragraphs 73-82, 97, operative part 2)
Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Conditions governing the lawfulness of the processing of personal data – Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority – Processing of personal data by the public prosecutor’s office of a Member State for the purpose of exercising its rights of defence in an action for damages against the State – Whether permissible – Conditions
(European Parliament and Council Regulation 2016/679, Arts 6(1), first subpara., point (e), and 3, 5(1)(c), 21(1) and 23(1))
(see paragraphs 83, 87-93, 95-97, operative part 3)
Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Conditions governing the lawfulness of the processing of personal data – Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority – Exclusive in relation to processing necessary for the purposes of the legitimate interests pursued by the controller or by a third party
(European Parliament and Council Regulation 2016/679, recital 47 and Art. 6(1), first subpara., points (e) and (f), and second subpara.)
(see paragraphs 84-86)
Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Conditions governing the lawfulness of the processing of personal data – Processing necessary for compliance with a legal obligation to which the controller is subject – Conditions
(European Parliament and Council Regulation 2016/679, Art. 6(1), first subpara., point (c))
(see paragraph 94)
See the text of the decision.