Enforcing jurisdiction
European Union · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Lisa Ballmann – CJEU Judgment (European Union, 2025)

CJEU Judgment
Court of Justice of the European Union16 July 2025European Union
final
CJEU Judgment

CJEU judgment — not a DPA enforcement action

This is a Court of Justice ruling, not an enforcement action by a data protection authority. It is not included in cookie statistics or the Risk Calculator.

The Court of Justice of the European Union addressed procedural issues in a cross-border case involving Meta Platforms Ltd. The court's ruling clarified how complaints about data processing should be handled among EU authorities. This is important for users who want to understand their rights when filing complaints against large tech companies.

What happened

The court ruled on procedural aspects of a cross-border complaint against Meta regarding data processing.

Who was affected

A Facebook user who filed a complaint against Meta was involved in this case.

What the authority found

The court clarified that the complaint process must follow specific procedures among EU data protection authorities.

Why this matters

This ruling emphasizes the importance of proper procedures in handling data protection complaints. Users should know their rights and how to effectively file complaints against companies.

Recorded legal citations
Automatically processed
View original scraped data
Art. 65(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityCJEU

Source checks

Secondary-source text retrieved.

Automated check recorded — 21 March 2026.

Processing notes: articles corrected, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The ruling relates to the procedural aspects of a cross-border case involving Meta Platforms Ltd. The full summary for the case is available here. = In May 2018 a Facebook user (the complainant) lodged a complaint against Meta Platforms Ireland Ltd with the Austrian DPA. In her complaint, she claimed that the collection of personal data via Facebook violated several rules of the GDPR, including Articles 6 and 9. Short after the complaint was filed, the Austrian DPA held that the case was cross-border in nature and forwarded the complaint to the Irish DPA as the lead supervisory authority. In 2021 the Irish DPA submitted a draft decision to all EEA supervisory authorities. Some of them raised “reasoned and relevant objections” to the draft within the meaning of Article 4(24) GDPR. The DPC decided not to follow some of those objections and, therefore, referred the matter to the EDPB under the GDPR’s consistency mechanism. The EDPB decided the matter in December 2022 with its Binding Decision 3/2022. Following the Binding Decision, the Irish DPA decided the complaint and fined Meta €210,000,000 over the unlawful processing of personal data for targeted advertising on Facebook. = After the dispute resolution procedure of the EDPB the complainant requested access to the case file relating to her complaint. She invoked several provisions of EU primary and secondary law, including Article 41(2)(b) of the EU Charter of Fundamental Rights (“Right to good administration”). The EDPB replied with an email to the complainant (from now on: “the Contested Decision”), granting the complainant access to some of the documents relative to the procedure based on [https://eur-lex.europa.eu/eli/reg/2001/1049/oj EU Regulation 1049/2001]. However, the EDPB held that the complainant had no right of access under Article 41(2)(b) CFREU. As a result, the EDPB only granted the complainant access to parts of the file. The complainant considered that the EDPB violated her rights and filed an

Outcome

CJEU Case

A judgment or Advocate General opinion in a case before the Court of Justice of the European Union.

Related Cases (0)

No other cases found for Lisa Ballmann in EU

This is the only recorded case for this entity in this jurisdiction.

Details

Judgment Date

16 July 2025

Authority

Court of Justice of the European Union

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Lisa Ballmann - European Union (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: