Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation

CJEU case C-687/21 Saturn Electro – CJEU Judgment (Germany, 2021)

CJEU Judgment
Court of Justice of the European Union16 November 2021Germany
final
CJEU Judgment

CJEU judgment — not a DPA enforcement action

This is a Court of Justice ruling, not an enforcement action by a data protection authority. It is not included in cookie statistics or the Risk Calculator.

The Court of Justice of the European Union addressed a case involving a customer whose personal data was mistakenly given to another customer. The court's ruling will help clarify the rules around compensation for non-material damage under GDPR. This decision could impact future cases involving data breaches.

What happened

A customer sought compensation after their personal data was accidentally disclosed to another customer by a store.

Who was affected

The customer whose personal information was mistakenly shared with an unauthorized third party.

What the authority found

The Court of Justice ruled on key questions regarding compensation for non-material damage under GDPR, which will guide future cases.

Why this matters

This ruling is significant for understanding how GDPR applies to accidental data disclosures. It may influence how companies approach data protection and liability.

Recorded legal citations
Automatically processed
Art. 2(1) GDPR
Art. 5(1)(f) GDPR
Art. 6(1) GDPR
Art. 82 GDPR
View original scraped data
Art. 2(1) GDPR
Art. 5(1)(f) GDPR
Art. 6(1) GDPR
Art. 82(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityCJEU
Reviewed AuthorityAmG Hagen (Germany)

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The case concerns a customer of Saturn whose appliance and purchase documents, while in the shop, were mistakenly given to another customer. The first customer seeks compensation for this error. The District Court of Hagen referred the following questions to the CJEU for a preliminary ruling: 1. As no automatic legal effects are specified, is the compensation rule enacted in Article 82 GDPR invalid in the case of non-material damage? 2. Is it necessary, for the purposes of the right to compensation, to establish the occurrence of non-material damage, to be demonstrated by the claimant, in addition to the unauthorised disclosure of the protected data to an unauthorised third party? 3. Does the accidental disclosure of the personal data of the data subject (name, address, occupation, income, employer) to a third party in a paper document (printout), as the result of a mistake by employees of the processing undertaking, suffice in order to establish infringement of the GDPR? 4. Where the undertaking accidentally discloses, through its employees, data entered in an automated data processing system to an unauthorised third party in the form of a printout, does that accidental disclosure to a third party qualify as unlawful further processing (Article 2(1), Article 5(1)(f), Article 6(1) and Article 24 GDPR)? 5. Is non-material damage within the meaning of Article 82 GDPR incurred even where the third party who received the document containing the personal data did not read the data before returning the document containing the information, or does the discomfort of the person whose personal data were unlawfully disclosed suffice for the purpose of establishing non-material damage within the meaning of Article 82 GDPR, given that every unauthorised disclosure of personal data entails the risk, which cannot be eliminated, that the data might nevertheless have been passed on to any number of people or even misused? 6. Where accidental disclosure to third parties is preventabl

Outcome

CJEU Case

A judgment or Advocate General opinion in a case before the Court of Justice of the European Union.

Related Cases (0)

No other cases found for CJEU case C-687/21 Saturn Electro in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Judgment Date

16 November 2021

Authority

Court of Justice of the European Union

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. CJEU case C-687/21 Saturn Electro - Germany (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: