[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdYzrDf0XsXspctAaDbzjLvWPHB_CdtrhOofS5SOUUao":3},{"article":4,"iocs":37,"watch_terms":38,"solutions":39,"lesson":42},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"81f1035a-14ba-4667-8fcb-b28645323bd1","CJEU - C‑414\u002F24 - Datenschutzbehörde (Articulation des recours)","cjeu-c-414-24-datenschutzbehorde-articulation-des-recours-80a220","← Older revision Revision as of 06:06, 23 June 2026 (One intermediate revision by the same user not shown) Line 45: Line 45: }} }} The CJEU held that a supervisory authority cannot reject a complaint on the sole ground that judicial proceedings under Article 79(1) GDPR have already been brought concerning the same matter. The CJEU held that a supervisory authority cannot reject a complaint under Article 77(1) GDPR on the sole ground that judicial proceedings under Article 79(1) GDPR have already been brought concerning the same subject matter. ==English Summary== ==English Summary==","The Court of Justice of the European Union (CJEU) has ruled that a data protection supervisory authority cannot reject a complaint solely because the data subject has already initiated judicial proceedings on the same matter. This decision clarifies that the right to lodge a complaint with a supervisory authority under GDPR is independent of the right to a judicial remedy against a controller or processor.","CJEU rules supervisory authorities cannot reject GDPR complaints solely due to ongoing judicial proceedings.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=CJEU_-_C%E2%80%91414\u002F24_-_Datenschutzbeh%C3%B6rde_(Articulation_des_recours)&diff=51947&oldid=51928","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F8\u002F87\u002FCjeulogo.png","2026-06-23T06:06:20+00:00","2026-06-23T08:00:19.818736+00:00",7,[17],{"name":18,"type":19},"GDPR","product","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,30,35],{"category":27},{"id":28,"icon":22,"name":18,"slug":29},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","gdpr",{"category":31},{"id":32,"icon":22,"name":33,"slug":34},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":36},{"id":20,"icon":22,"name":23,"slug":24},[],[18],{"controls":40,"vendors":41},[],[],{"slug":43,"title":44,"body":45,"framework_refs":46,"framework_notes":56},"cjeu-rules-gdpr-complaint-rights-independent-of-judicial-remedies","CJEU Rules GDPR Complaint Rights Independent of Judicial Remedies","The CJEU clarified that data subjects retain the right to file complaints with supervisory authorities (such as a Data Protection Authority) even when they have already pursued judicial remedies against a controller or processor. Organizations that assumed parallel proceedings would neutralize regulatory scrutiny were operating under a flawed legal assumption. This ruling reinforces that GDPR provides layered, independent enforcement pathways — supervisory, judicial, and civil — that cannot be used to obstruct one another. Failing to recognize this distinction exposes organizations to simultaneous regulatory investigations and court actions, compounding legal and reputational risk.",[47,48,49,50,51,52,53,54,55],"GDPR Article 77 – Right to lodge a complaint with a supervisory authority","GDPR Article 78 – Right to an effective judicial remedy against a supervisory authority","GDPR Article 79 – Right to an effective judicial remedy against a controller or processor","GDPR Article 57(1)(f) – Tasks of the supervisory authority to handle complaints","NIST SP 800-53 PT-5 – Privacy Notice","NIST SP 800-53 IR-7 – Incident Response Assistance","CIS Control 17 – Implement a Security Awareness and Training Program","ISO\u002FIEC 27701:2019 – Privacy Information Management (PIMS)","ITIL Service Management – Complaint and escalation handling processes",{"NIST SP 800-53 PT-5 – Privacy Notice":57,"NIST SP 800-53 IR-7 – Incident Response Assistance":58,"ISO\u002FIEC 27701:2019 – Privacy Information Management (PIMS)":59,"CIS Control 17 – Implement a Security Awareness and Training Program":60,"ITIL Service Management – Complaint and escalation handling processes":61,"GDPR Article 77 – Right to lodge a complaint with a supervisory authority":62,"GDPR Article 57(1)(f) – Tasks of the supervisory authority to handle complaints":63,"GDPR Article 78 – Right to an effective judicial remedy against a supervisory authority":64,"GDPR Article 79 – Right to an effective judicial remedy against a controller or processor":65},"Privacy notices should tell individuals about their right to complain to the supervisory authority.","Assistance processes help organisations respond to both regulatory complaints and court cases about personal data.","A PIMS includes processes for handling data subject complaints and regulator enquiries.","Training staff on data subject rights helps organisations handle complaints properly, knowing regulators may act regardless of litigation.","Complaint and escalation processes help organisations respond consistently when individuals pursue parallel routes.","Article 77 gives data subjects the right to complain to a supervisory authority, which the CJEU confirmed applies alongside court action.","Supervisory authorities must handle complaints, so organisations cannot rely on court cases to avoid regulatory scrutiny.","Article 78 gives a judicial remedy against supervisory authority decisions, part of the parallel routes the CJEU clarified.","Article 79 allows court action against controllers, which the CJEU ruled does not remove the right to complain to a regulator."]