The Court of Justice of the European Union (CJEU) confirmed that for a national law to provide a legal basis for data processing under GDPR, it must pursue a public interest purpose and be proportionate to that legitimate aim.
In its ruling, the CJEU emphasized that even non-sensitive data that may reveal sensitive information deserve strong protections, underscoring the broader scope of the GDPR's protective measures.
Collection
[
|
...
]