[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhjM9_LzALEPaAmgBodX3ELPiEmuVXas-YgtpVoOObtA":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":46},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"b6b15f1e-28f8-4d0b-9141-a2710c9d12bc","CJEU - C-12\u002F25","cjeu-c-12-25-94c1e9","← Older revision Revision as of 14:20, 6 October 2026 Line 1: Line 1: {{CJEUdecisionBOX The Advocate General opined that a data subject can request the erasure of their name from the baptism register unless the Diocese demonstrates overriding legitimate grounds for the processing or the processing is necessary for archiving or historical research purposes.{{CJEUdecisionBOX |Case_Number_Name=C-12\u002F25 |Case_Number_Name=C-12\u002F25 Line 85: Line 85: | | }} }} According to the Advocate General, a data subject can request the erasure of their personal data from the baptism register under [[Article 17 GDPR|Article 17(1)(c) GDPR]] because of the emotional distress of the data subject to be affiliated with the Church despite their departure from it, unless the Diocese presents overriding legitimate grounds for the processing. ==English Summary== ==English Summary==","The Advocate General in CJEU case C-12\u002F25 opined that a data subject can request the erasure of their personal data from a baptismal register under Article 17 GDPR. This is permissible due to emotional distress from continued affiliation with the Church after departure, unless the Diocese can demonstrate overriding legitimate grounds for processing or if the data is necessary for archiving or historical research purposes.","Advocate General opines data subject can request erasure from baptism register unless overriding grounds exist.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=CJEU_-_C-12\u002F25&diff=53308&oldid=53294","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F8\u002F87\u002FCjeulogo.png","2026-10-06T14:20:29+00:00","2026-10-06T16:00:16.162521+00:00",7,[17,20],{"name":18,"type":19},"baptism register","product",{"name":21,"type":22},"Diocese of Ghent","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},[],[21,18],{"controls":44,"vendors":45},[],[],{"slug":47,"title":48,"body":49,"framework_refs":50,"framework_notes":62},"cjeu-rules-individuals-can-demand-erasure-from-church-baptismal-records-under-gdpr","CJEU Rules Individuals Can Demand Erasure from Church Baptismal Records Under GDPR","The CJEU Advocate General's opinion in case C-12\u002F25 affirms that Article 17 GDPR's 'right to erasure' extends to religious organizations maintaining baptismal registers, when continued data processing causes emotional distress to individuals who have left the faith. This ruling highlights that no organization — including religious institutions — is categorically exempt from GDPR obligations simply by virtue of their historical record-keeping traditions. The burden falls on the data controller (the Diocese) to demonstrate overriding legitimate grounds for retention, such as archiving or historical research, rather than assuming perpetual lawfulness of processing. Failure to honor valid erasure requests without documented justification exposes organizations to regulatory enforcement and reputational harm.",[51,52,53,54,55,56,57,58,59,60,61],"GDPR Article 17 (Right to Erasure \u002F Right to be Forgotten)","GDPR Article 17(3) (Exemptions to Erasure)","GDPR Article 21 (Right to Object)","GDPR Article 6 (Lawful Basis for Processing)","GDPR Article 37-39 (Data Protection Officer Requirements)","GDPR Article 35 (Data Protection Impact Assessment)","NIST SP 800-53 IP-3 (Information Management and Retention)","NIST Privacy Framework PR.DS-P (Data Processing Policies)","CIS Control 3 (Data Protection)","ISO\u002FIEC 27701:2019 (Privacy Information Management)","ITIL Service Management — Request Fulfilment (DSR handling)",{}]