[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU6aO4NMMYYT8T1ZlOYD0m5uTiioTkuJiCLRA9PZg5wY":3},{"article":4,"iocs":37,"watch_terms":38,"solutions":39,"lesson":42},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"6fd9053d-fc87-489d-9dad-9705cb0b0534","CJEU - C‑414\u002F24 - Datenschutzbehörde (Articulation des recours)","cjeu-c-414-24-datenschutzbehorde-articulation-des-recours-23cf69","← Older revision Revision as of 06:39, 22 June 2026 Line 45: Line 45: }} }} The AG opined that the DPA may not reject a complaint solely on the basis that there are pending judicial proceedings on the same subject matter before a court. According to the AG, the DPA must suspend its investigations until the ongoing proceedings are complete. The CJEU held that a supervisory authority cannot reject a complaint on the sole ground that judicial proceedings under Article 79(1) GDPR have already been brought concerning the same matter. ==English Summary== ==English Summary==","The Court of Justice of the European Union (CJEU) has ruled that data protection authorities (DPAs) cannot dismiss a complaint simply because judicial proceedings on the same matter are already underway. The court clarified that the right to lodge a complaint with a DPA is independent of the right to seek a judicial remedy against a controller or processor under GDPR.","CJEU rules supervisory authorities cannot reject GDPR complaints solely due to pending court proceedings.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=CJEU_-_C%E2%80%91414\u002F24_-_Datenschutzbeh%C3%B6rde_(Articulation_des_recours)&diff=51928&oldid=51924","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F8\u002F87\u002FCjeulogo.png","2026-06-22T06:39:59+00:00","2026-06-22T08:00:12.757526+00:00",7,[17],{"name":18,"type":19},"GDPR","product","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,30,35],{"category":27},{"id":28,"icon":22,"name":18,"slug":29},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","gdpr",{"category":31},{"id":32,"icon":22,"name":33,"slug":34},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":36},{"id":20,"icon":22,"name":23,"slug":24},[],[18],{"controls":40,"vendors":41},[],[],{"slug":43,"title":44,"body":45,"framework_refs":46,"framework_notes":55},"cjeu-rules-dpas-must-handle-complaints-regardless-of-parallel-court-proceedings","CJEU Rules DPAs Must Handle Complaints Regardless of Parallel Court Proceedings","The Court of Justice of the European Union clarified that data protection authorities (DPAs) cannot dismiss a GDPR complaint solely because judicial proceedings on the same matter are already in progress. This ruling reinforces that the right to complain to a DPA is an independent and autonomous remedy under GDPR, separate from any judicial route a data subject may pursue. Organizations must recognize that they can face simultaneous regulatory investigations and civil litigation for the same data protection violation, compounding liability and reputational risk. This matters because companies that assume an ongoing lawsuit 'shields' them from regulatory scrutiny are now on notice that this assumption is legally incorrect across the EU.",[47,48,49,50,51,52,53,54],"GDPR Article 77 – Right to lodge a complaint with a supervisory authority","GDPR Article 78 – Right to an effective judicial remedy against a supervisory authority","GDPR Article 79 – Right to an effective judicial remedy against a controller or processor","GDPR Article 57 – Tasks of the supervisory authority (obligation to handle complaints)","NIST SP 800-53 IR-6 – Incident Reporting","NIST SP 800-53 PM-9 – Risk Management Strategy","CIS Control 17 – Incident Response Management","ISO\u002FIEC 27701:2019 – Privacy Information Management (PIMS) clauses 6.5 and 8.5",{}]