CJEU – CJEU Judgment (European Union, 2026)
CJEU judgment — not a DPA enforcement action
This is a Court of Justice ruling, not an enforcement action by a data protection authority. It is not included in cookie statistics or the Risk Calculator.
The Court of Justice ruled on a case involving a temporary agent at the CJEU who reported misconduct. The court found that the authority did not properly assist the agent in their whistleblowing efforts. This decision highlights the importance of support for individuals who report wrongdoing in organizations.
What happened
The Court ruled on a whistleblower's request for assistance and access to documents related to their case.
Who was affected
The temporary agent who reported inappropriate conduct and sought assistance from the CJEU was affected.
What the authority found
The Court held that the authority's response to the whistleblower's requests was inadequate and did not meet the necessary standards for support.
Why this matters
This ruling emphasizes the need for organizations to have clear procedures and support for whistleblowers. It sets a precedent for how authorities should handle such cases in the future.
A data subject was a temporary agent working for the CJEU. In 2019, the data subject reported inappropriate conduct of a member of the General Court with whom they were working. The President of the General Court initiated proceedings, and an Advisory Committee issued an opinion that the member in question had breached provisions of the Code (the data subject was informed of this opinion). The data subject requested the relevant authority (“AHCC”) to open an administrative investigation and provide them with technical and financial assistance in potential proceedings before national judicial authorities. The authority opened an investigation and partially granted the request for assistance in September 2019. The data subject did not contest this decision, and filed a new request for assistance in 2021 on the grounds that new and substantial facts had arisen since the decision in 2019. The Appeals Panel considered this as a request for an internal appeal and declared it inadmissible. The Panel also dismissed the request on the merits, considering it unfounded. In 2019, the data subject also submitted an access request to the General Court and Presidents of the Court of Justice, in accordance with [https://eur-lex.europa.eu/eli/reg/2018/1725/oj/eng Article 17 of the EUDPR]. The data subject requested access to documents relating to the whistleblowing and assistance procedures they had initiated. Both parties rejected the data subject’s access request, on the grounds that it would likely infringe upon the rights and freedoms of others ([https://eur-lex.europa.eu/eli/reg/2018/1725/oj/eng Article 17(4) and 25(1)(c), (g), and (h) EUDPR]). The data subject filed an internal appeal, which was rejected in 2020. The data subject filed a new access request in 2023. This request was rejected on the grounds that it had the same subject matter as the access request made in 2019. The data subject filed a case with the General Court to overturn the dismissal of the internal appeal.
Outcome
CJEU Judgment
A judgment by the Court of Justice of the European Union, typically on a preliminary reference from a national court.
Related Cases (0)
No other cases found for CJEU in EU
This is the only recorded case for this entity in this jurisdiction.
Details
Judgment Date
22 April 2026
Authority
Court of Justice of the European Union
GDPRhub ID
gdprhub-cjeu-9972About this data
Cite as: Cookie Fines. CJEU - European Union (2026). Retrieved from cookiefines.eu
Last updated: