- Enforcing jurisdiction
- European Union · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Lisa Ballmann – CJEU Judgment (European Union, 2025)
CJEU judgment — not a DPA enforcement action
This is a Court of Justice ruling, not an enforcement action by a data protection authority. It is not included in cookie statistics or the Risk Calculator.
The Court of Justice of the European Union addressed procedural issues in a cross-border case involving Meta Platforms Ltd. The court's ruling clarified how complaints about data processing should be handled among EU authorities. This is important for users who want to understand their rights when filing complaints against large tech companies.
What happened
The court ruled on procedural aspects of a cross-border complaint against Meta regarding data processing.
Who was affected
A Facebook user who filed a complaint against Meta was involved in this case.
What the authority found
The court clarified that the complaint process must follow specific procedures among EU data protection authorities.
Why this matters
This ruling emphasizes the importance of proper procedures in handling data protection complaints. Users should know their rights and how to effectively file complaints against companies.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 21 March 2026.
Processing notes: articles corrected, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The ruling relates to the procedural aspects of a cross-border case involving Meta Platforms Ltd. The full summary for the case is available here. = In May 2018 a Facebook user (the complainant) lodged a complaint against Meta Platforms Ireland Ltd with the Austrian DPA. In her complaint, she claimed that the collection of personal data via Facebook violated several rules of the GDPR, including Articles 6 and 9. Short after the complaint was filed, the Austrian DPA held that the case was cross-border in nature and forwarded the complaint to the Irish DPA as the lead supervisory authority. In 2021 the Irish DPA submitted a draft decision to all EEA supervisory authorities. Some of them raised “reasoned and relevant objections” to the draft within the meaning of Article 4(24) GDPR. The DPC decided not to follow some of those objections and, therefore, referred the matter to the EDPB under the GDPR’s consistency mechanism. The EDPB decided the matter in December 2022 with its Binding Decision 3/2022. Following the Binding Decision, the Irish DPA decided the complaint and fined Meta €210,000,000 over the unlawful processing of personal data for targeted advertising on Facebook. = After the dispute resolution procedure of the EDPB the complainant requested access to the case file relating to her complaint. She invoked several provisions of EU primary and secondary law, including Article 41(2)(b) of the EU Charter of Fundamental Rights (“Right to good administration”). The EDPB replied with an email to the complainant (from now on: “the Contested Decision”), granting the complainant access to some of the documents relative to the procedure based on [https://eur-lex.europa.eu/eli/reg/2001/1049/oj EU Regulation 1049/2001]. However, the EDPB held that the complainant had no right of access under Article 41(2)(b) CFREU. As a result, the EDPB only granted the complainant access to parts of the file. The complainant considered that the EDPB violated her rights and filed an
Outcome
CJEU Case
A judgment or Advocate General opinion in a case before the Court of Justice of the European Union.
Related Cases (0)
No other cases found for Lisa Ballmann in EU
This is the only recorded case for this entity in this jurisdiction.
Details
Judgment Date
16 July 2025
Authority
Court of Justice of the European Union
About this data
Cite as: Cookie Fines. Lisa Ballmann - European Union (2025). Retrieved from cookiefines.eu
Last updated: