Enforcing jurisdiction
European Union · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

The European Commission – CJEU Judgment (European Union, 2025)

CJEU Judgment
Court of Justice of the European Union1 January 2025European Union
final
CJEU Judgment

CJEU judgment — not a DPA enforcement action

This is a Court of Justice ruling, not an enforcement action by a data protection authority. It is not included in cookie statistics or the Risk Calculator.

The Court of Justice of the European Union ruled on Hungary's law that restricted access to information about individuals convicted of sexual offenses. The European Commission argued that the law violated EU data protection rules. This case raises important questions about balancing public safety and personal privacy.

What happened

The court examined Hungary's law that limited access to information about sexual offenders.

Who was affected

Individuals convicted of sexual offenses and the general public were affected by the law.

What the authority found

The Court stated that Hungary's law may conflict with EU data protection standards.

Why this matters

This ruling emphasizes the need for laws to align with EU data protection principles. It serves as a reminder for countries to carefully consider privacy rights when enacting legislation aimed at public safety.

Recorded legal citations
Automatically processed
Art. 10 GDPR
View original scraped data
Art. 10(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityCJEU

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 March 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The background In 2021 Hungary adopted "Law LXXIX of 2021 adopting stricter measures against persons convicted of paedophilia and amending certain laws for the protection of children" ("the amending law"). The law introduced a number of rules to restrict the access of minors to content portraying or promoting gender identities that do not correspond to the sex assigned at birth, sex reassignment or homosexuality. The law also introduced new rules for access to public documents, requiring public bodies to allow broad access to information about individuals convicted of sexual offences against children. The alleged purpose of the law was to protect minors. In 2021 the Commission sent a formal letter to Hungary contesting the amending law's compliance with EU law. After some unproductive back-and-forth, the Commission escalated the case to the CJEU, requesting the CJEU to declare the amending law incompatible with EU law. The European Commission filed four pleas, claiming that Hungary violated of a long list of provisions from primary and secondary EU lawThe Commission alleged the violation of Articles 1, 7, 8(2), 11 and 21 CFREU; Article 2 TEU; Article 56 TFEU; Article 3(2) of the Directive on electronic commerce; Articles 16 and 19 of the Services Directive, Article 9(1)(c)(ii) of the AVMS Directive; and Article 10 GDPR.. Only the Commission's fourth plea invokes data protection law- specifically, Article 8(2) CFREU ("Protection of personal data") and Article 10 GDPR ("Processing of personal data relating to criminal convictions and offences"). The fourth plea: Article 10 GDPR The alleged violation of the GDPR relates to the amended law's rules on access to information about individuals convicted of sexual offences against children. The law amended the "Law on the criminal record system" and made documents about sexual offences accessible to a broad audience. Under the new rules, any adult who is either a relative or a guardian of a minor ("authorised person"), has t

Outcome

CJEU Case

A judgment or Advocate General opinion in a case before the Court of Justice of the European Union.

Details

Judgment Date

1 January 2025

Authority

Court of Justice of the European Union

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. The European Commission - European Union (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: