I imagine what I want to write in my case, I write it in the search engine and I get exactly what I wanted. Thank you!
Valentina R., lawyer
C series
—
(Reference for a preliminary ruling - Protection of personal data - Regulation (EU) 2016/679 - Article 83(4) to (6) and (9) - Concept of an ‘undertaking’ - Parent company and subsidiary - Infringement of that regulation by a subsidiary - Calculation of the amount of the fine - Consideration of the total turnover of the group of which that subsidiary forms part)
(C/2025/1864)
Language of the case: Danish
Article 83(4) to (6) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), read in the light of recital 150 of that regulation,
must be interpreted as meaning that the term ‘undertaking’ in those provisions corresponds to the concept of ‘undertaking’, within the meaning of Articles 101 and 102 TFEU, with the result that, where a fine for infringement of Regulation 2016/679 is imposed on a controller of personal data which is or forms part of an undertaking, the maximum amount of the fine is to be determined on the basis of a percentage of the undertaking’s total worldwide annual turnover in the preceding business year. The concept of ‘undertaking’ must also be taken into account in order to assess the actual or material economic capacity of the recipient of the fine and thus to ascertain whether the fine is at the same time effective, proportionate and dissuasive.
—
(1) OJ C 304, 28.8.2023.
ELI: http://data.europa.eu/eli/C/2025/1864/oj
ISSN 1977-091X (electronic edition)
—