EU case digest

Sharif Ibrahim and Solange Baris take a high-level look at the Dutch DPA's decision to sanction Uber.

Laura Huck looks at the CNIL's analysis of the controller and processor role and at the distinction between anonymisation and pseudonymisation of health data.

Christopher Bakier and Julia Pranz look at the CJEU's views on data minimisation and special data processing in the context of targeted digital advertising.

David Klein looks at the ECJ Lindenpotheke ruling which clarifies the right of competitors to sue for GDPR breaches and what constitutes health data.

Dominique Lensink looks at the CJEU's confirmation that the Dutch DPA's interpretation of legitimate interests was too strict.

Susan Hillert looks at the implications of the European General Court ruling in Bindl v Commission.