Case C-46/23,  Újpesti Polgármesteri Hivatal: Judgment of the Court (Fifth Chamber) of 14 March 2024 (request for a preliminary ruling from the Fővárosi Törvényszék - Hungary) – Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság (Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 58(2)(d) and (g) – Powers of the supervisory authority of a Member State – Article 17(1) – Right to erasure (‘right to be forgotten’) – Erasure of unlawfully processed personal data – Power of the national supervisory authority to order the controller or processor to erase those data without a prior request from the data subject)
Date: 2024-03-14
Institutions: Court of Justice
Subjects: competence of the institution, data protection, data-processing law, personal data, supervisory body








C_202403049EN.000101.fmx.xml












Official Journal of the European Union


EN
C series













C/2024/3049


13.5.2024






Judgment of the Court (Fifth Chamber) of 14 March 2024 (request for a preliminary ruling from the Fővárosi Törvényszék - Hungary) – Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság


(Case C-46/23,
                (1)
Újpesti Polgármesteri Hivatal)

(Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - Regulation (EU) 2016/679 - Article 58(2)(d) and (g) - Powers of the supervisory authority of a Member State - Article 17(1) - Right to erasure (‘right to be forgotten’) - Erasure of unlawfully processed personal data - Power of the national supervisory authority to order the controller or processor to erase those data without a prior request from the data subject)
(C/2024/3049)
Language of the case: Hungarian

Referring court

Fővárosi Törvényszék

Parties to the main proceedings


Applicant: Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala

Defendant: Nemzeti Adatvédelmi és Információszabadság Hatóság

Operative part of the judgment









1.


Article 58(2)(d) and (g) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation),
must be interpreted as meaning that the supervisory authority of a Member State is entitled, in the exercise of its corrective powers foreseen under those provisions, to order the controller or processor to erase unlawfully processed personal data, even though no request to that end has been made by the data subject with a view to exercising his or her rights pursuant to Article 17(1) of that regulation.












2.


Article 58(2) of Regulation 2016/679
must be interpreted as meaning that the power of the supervisory authority of a Member State to order the erasure of unlawfully processed personal data may apply both to data collected from the data subject and to data originating from another source.






(1)  
            OJ C 127, 11.4.2023.


ELI: http://data.europa.eu/eli/C/2024/3049/oj
ISSN 1977-091X (electronic edition)