CJEU - T‑384/20 RENV - OC v Commission
EU court orders European Commission to pay €50,000 for unlawful data processing.
The General Court of the European Union has ordered the European Commission to pay €50,000 in damages to a data subject. This ruling stems from a press release that detailed the results of an anti-fraud investigation, which the court found contained unnecessary and inaccurate personal data. The Commission's unlawful processing of this information led to the penalty.
AI summary of the linked source. Not reviewed by an editor. How this works
Run European Commission?
Get an email when a new story names European Commission, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe European Commission was ordered to pay €50,000 in damages after publishing a press release containing unnecessary and inaccurate personal data about an individual involved in an anti-fraud investigation. This case highlights that even official institutional communications must adhere strictly to data minimisation and accuracy principles under EU data protection law. Publishing more personal information than is required for a legitimate purpose constitutes unlawful processing, regardless of the public interest nature of the underlying activity. The ruling underscores that data protection obligations apply equally to EU institutions and private organisations, and that reputational and financial harm caused by inaccurate disclosures carries real legal consequences.