- Enforcing jurisdiction
- European Union · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
CJEU case C‑371/24 Comdribus – CJEU Judgment (European Union, 2026)
CJEU judgment — not a DPA enforcement action
This is a Court of Justice ruling, not an enforcement action by a data protection authority. It is not included in cookie statistics or the Risk Calculator.
The Court of Justice of the European Union addressed questions about the systematic processing of biometric data in criminal investigations. The court's findings will help determine how national laws align with EU data protection standards. This ruling is significant for ensuring that personal data rights are respected in legal contexts.
What happened
The court evaluated the legality of systematically processing biometric data under national law.
Who was affected
Individuals suspected of having committed or attempted to commit an offense.
What the authority found
The court is reviewing whether national laws comply with the requirements of the Law Enforcement Directive regarding biometric data processing.
Why this matters
This ruling could impact how law enforcement agencies handle biometric data, emphasizing the need for strict compliance with data protection laws.
Source checks
Linked-source text retrieved.
Automated check recorded — 26 March 2026.
Processing notes: national law identified, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
In 2020, law enforcement officers arrested several people from a climate protest. One of the individuals detained (the data subject) provided their identity, but refused to be fingerprinted and photographed, as well as to provide the code to their phone (or unlock it themselves). The data subject was later accused before the Paris Criminal Court of unlawfully organising a protest, as well as refusing to provide their data for identification and investigation purposes in accordance with national lawArticle 55-1 of the Code of Criminal Procedure. The court found them guilty of not providing their biometric data and fined the data subject €300. Both the data subject and Public Prosecutor appealed the decision to the Paris Court of Appeal. The court requested a preliminary ruling from the CJEU, regarding the compatibility of national law with provisions of the Law Enforcement Directive (LED), taking into consideration previous case lawSee Ministerstvo na vatreshnite raboti (Recording of biometric and genetic data by the police) (C‑205/21, EU:C:2023:49, paragraph 135). Specifically, the court had questions regarding the systematic processing of biometric data of a data subject reasonably suspected of having committed or attempted to commit an offense in the context of an investigation, when the data subject has not necessarily been accused of committing an offense. The court referred the following questions: 1. Does the LED preclude national legislation from systematically processing identification data from data subjects who are suspected of having committed or attempted to commit an offense? 2. Does the LED require national legislation to oblige a competent authority to sufficiently explain why it is strictly necessary to process this data on an individual basis? 3. Does the LED preclude national legislation from allowing data subjects to be prosecuted on the basis of refusing to provide identification data, even if they are not prosecuted for or convicted of the offen
Outcome
CJEU Case
A judgment or Advocate General opinion in a case before the Court of Justice of the European Union.
Related Cases (0)
No other cases found for CJEU case C‑371/24 Comdribus in EU
This is the only recorded case for this entity in this jurisdiction.
Details
Judgment Date
19 March 2026
Authority
Court of Justice of the European Union
About this data
Cite as: Cookie Fines. CJEU case C‑371/24 Comdribus - European Union (2026). Retrieved from cookiefines.eu
Last updated: