- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
CJEU case C-687/21 Saturn Electro – CJEU Judgment (Germany, 2021)
CJEU judgment — not a DPA enforcement action
This is a Court of Justice ruling, not an enforcement action by a data protection authority. It is not included in cookie statistics or the Risk Calculator.
The Court of Justice of the European Union addressed a case involving a customer whose personal data was mistakenly given to another customer. The court's ruling will help clarify the rules around compensation for non-material damage under GDPR. This decision could impact future cases involving data breaches.
What happened
A customer sought compensation after their personal data was accidentally disclosed to another customer by a store.
Who was affected
The customer whose personal information was mistakenly shared with an unauthorized third party.
What the authority found
The Court of Justice ruled on key questions regarding compensation for non-material damage under GDPR, which will guide future cases.
Why this matters
This ruling is significant for understanding how GDPR applies to accidental data disclosures. It may influence how companies approach data protection and liability.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The case concerns a customer of Saturn whose appliance and purchase documents, while in the shop, were mistakenly given to another customer. The first customer seeks compensation for this error. The District Court of Hagen referred the following questions to the CJEU for a preliminary ruling: 1. As no automatic legal effects are specified, is the compensation rule enacted in Article 82 GDPR invalid in the case of non-material damage? 2. Is it necessary, for the purposes of the right to compensation, to establish the occurrence of non-material damage, to be demonstrated by the claimant, in addition to the unauthorised disclosure of the protected data to an unauthorised third party? 3. Does the accidental disclosure of the personal data of the data subject (name, address, occupation, income, employer) to a third party in a paper document (printout), as the result of a mistake by employees of the processing undertaking, suffice in order to establish infringement of the GDPR? 4. Where the undertaking accidentally discloses, through its employees, data entered in an automated data processing system to an unauthorised third party in the form of a printout, does that accidental disclosure to a third party qualify as unlawful further processing (Article 2(1), Article 5(1)(f), Article 6(1) and Article 24 GDPR)? 5. Is non-material damage within the meaning of Article 82 GDPR incurred even where the third party who received the document containing the personal data did not read the data before returning the document containing the information, or does the discomfort of the person whose personal data were unlawfully disclosed suffice for the purpose of establishing non-material damage within the meaning of Article 82 GDPR, given that every unauthorised disclosure of personal data entails the risk, which cannot be eliminated, that the data might nevertheless have been passed on to any number of people or even misused? 6. Where accidental disclosure to third parties is preventabl
Outcome
CJEU Case
A judgment or Advocate General opinion in a case before the Court of Justice of the European Union.
Related Cases (0)
No other cases found for CJEU case C-687/21 Saturn Electro in DE
This is the only recorded case for this entity in this jurisdiction.
Details
Judgment Date
16 November 2021
Authority
Court of Justice of the European Union
About this data
Cite as: Cookie Fines. CJEU case C-687/21 Saturn Electro - Germany (2021). Retrieved from cookiefines.eu
Last updated: