Case C-333/22, Ligue des droits humains (Verification by the supervisory authority of data processing): Judgment of the Court (Fifth Chamber) of 16 November 2023 (request for a preliminary ruling from the cour d’appel de Bruxelles — Belgium) — Ligue des droits humains ASBL, BA v Organe de contrôle de l’information policière (Reference for a preliminary ruling — Protection of natural persons with regard to the processing of personal data — Directive (EU) 2016/680 — Article 17 — Exercise of the rights of the data subject through the supervisory authority — Verification of the lawfulness of the data processing — Article 17(3) — Obligation to provide the data subject with a minimum of information — Scope — Validity — Article 53 — Right to seek an effective judicial remedy against the supervisory authority — Concept of a ‘legally binding decision’ — Charter of Fundamental Rights of the European Union — Article 8(3) — Control by an independent authority — Article 47 — Right to effective judicial protection)
Date: 2023-11-16
Institutions: Court of Justice
Subjects: data protection, data-processing law, judicial review, personal data, right to justice, supervisory body








C_202400515EN.000101.fmx.xml












Official Journal of the European Union


EN
Series C













C/2024/515


8.1.2024





Judgment of the Court (Fifth Chamber) of 16 November 2023 (request for a preliminary ruling from the cour d’appel de Bruxelles — Belgium) — Ligue des droits humains ASBL, BA v Organe de contrôle de l’information policière
(Case C-333/22, (1) Ligue des droits humains (Verification by the supervisory authority of data processing))
(Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - Directive (EU) 2016/680 - Article 17 - Exercise of the rights of the data subject through the supervisory authority - Verification of the lawfulness of the data processing - Article 17(3) - Obligation to provide the data subject with a minimum of information - Scope - Validity - Article 53 - Right to seek an effective judicial remedy against the supervisory authority - Concept of a ‘legally binding decision’ - Charter of Fundamental Rights of the European Union - Article 8(3) - Control by an independent authority - Article 47 - Right to effective judicial protection)
(C/2024/515)
Language of the case: French

Referring court

Cour d’appel de Bruxelles

Parties to the main proceedings


Applicants: Ligue des droits humains ASBL, BA

Defendant: Organe de contrôle de l’information policière

Operative part of the judgment







1.


Article 17 of Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA, read in conjunction with Article 46(1)(g), Article 47(1) and (2) and Article 53(1) of that directive and with Article 8(3) and Article 47 of the Charter of Fundamental Rights of the European Union,
must be interpreted as meaning that where the rights of a data subject have been exercised, pursuant to Article 17 of that directive, through the competent supervisory authority and that authority informs that data subject of the result of the verifications carried out, that data subject must have an effective judicial remedy against the decision of that authority to close the verification process. .











2.


The examination of the second question has revealed nothing capable of affecting the validity of Article 17(3) of Directive 2016/680.






(1)  
            OJ C 326, 29.8.2022.


ELI: http://data.europa.eu/eli/C/2024/515/oj
ISSN 1977-091X (electronic edition)