Confirmed fines require intent or negligence and can be based on total group turnover. GDPR Articles With Commentary & EU Case Laws
In UI v Österreichische Post AG (C-300/21), the court held that mere infringement is not enough to warrant compensation; there must be actual damage, though there is no "seriousness" threshold. A later ruling (C-340/21) confirmed that a well-founded fear of data misuse can qualify as non-material damage. Summary Table of Landmark EU Case Laws Relevant Article Key Ruling / Impact Schrems II (C-311/18) Art. 44–46 Confirmed fines require intent or negligence and can
The CJEU ruled in FT v DW (C-307/22) that controllers must provide the first copy of medical records free of charge , regardless of the reason for the request. Article 82: Right to Compensation Summary Table of Landmark EU Case Laws Relevant
Anyone who has suffered damage due to a GDPR infringement has the right to receive compensation from the controller or processor.