ASNEF – CJEU Judgment (European Union, 2011)
CJEU precedent (Directive 95/46/EC, pre-GDPR)
This is a Court of Justice judgment predating the GDPR. It interprets Directive 95/46/EC (the Data Protection Directive). It is not a cookie or ePrivacy case and is excluded from cookie statistics and the Risk Calculator.
The Court of Justice of the European Union ruled on a case involving ASNEF and FECEMD, who challenged a Spanish law allowing data transfers without consent. The court decided that EU law does not allow countries to add new reasons for processing personal data without consent. This decision is important because it ensures consistent data protection rules across Europe.
What happened
ASNEF and FECEMD challenged a Spanish law that allowed data transfers without user consent in certain situations.
Who was affected
Individuals whose personal data could be transferred outside the EU without their consent under Spanish law.
What the authority found
The court decided that EU law does not permit countries to create new reasons for processing personal data without user consent.
Why this matters
This ruling emphasizes that EU countries must follow a strict list of reasons for processing personal data, ensuring uniform data protection standards. Businesses should be aware that national laws cannot override EU data protection rules.
National Law Articles
ASNEF and FECEMD challenged the [https://apdcat.gencat.cat/web/.content/01-autoritat/normativa/documentos/2643.pdf Spanish Royal Decree 1720/2007]. They claimed that [https://apdcat.gencat.cat/web/.content/01-autoritat/normativa/documentos/2643.pdf Article 10(2)(a) and (2)(b) of the Royal decree], allowing extra-EU data transfers without the consent of the data subject in specific instances provided by national law (i.e when the processing serves a legitimate interest of the controller, when it is necessary to fulfil a duty imposed on them, when the data is public accessible) is compatible with [https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:31995L0046 Article 7(f) Dir.95/46], providing legal basis for data processing. Two questions were referred to the CJEU: 1. Must [https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:31995L0046 Article 7(f) Dir.95/46] be interpreted as precluding the application of national rules which, in the absence of the interested party’s consent, and to allow processing of his personal data that is necessary to pursue a legitimate interest of the controller or of third parties to whom the data will be disclosed, not only require that fundamental rights and freedoms should not be prejudiced, but also require the data to appear in public sources? 2. Are the conditions for conferring on it direct effect met by [https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:31995L0046 Article 7(f) Dir.95/46]? Answer to the first question The objective of ensuring an equivalent level of protection in all Member States that [https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:31995L0046 Article 7 Dir.95/46] sets out an exhaustive and restrictive list of cases in which the processing of personal data can be regarded as being lawful. Thus, Member States cannot add new principles relating to the lawfulness of the processing of personal data to [https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:31995L0
Outcome
CJEU Judgment
A judgment by the Court of Justice of the European Union, typically on a preliminary reference from a national court.
Related Cases (0)
No other cases found for ASNEF in EU
This is the only recorded case for this entity in this jurisdiction.
Details
Judgment Date
24 November 2011
Authority
Court of Justice of the European Union
GDPRhub ID
gdprhub-cjeu-9080About this data
Cite as: Cookie Fines. ASNEF - European Union (2011). Retrieved from cookiefines.eu
Last updated: