You are here:

CJEU Case C-272/19 / Judgment

VQ v Land Hessen

Policy area:
Information society
Deciding Body type:
Court of Justice of the European Union
Deciding Body:
Court IThird Chamber)
Type:
Decision
Decision date:
09/07/2020
ECLI:
ECLI:EU:C:2020:535

Key facts of the case:

Reference for a preliminary ruling — Article 267 TFEU — Concept of ‘court or tribunal’ — Protection of natural persons with regard to the processing of personal data — Regulation (EU) 2016/679 — Scope — Article 2(2)(a) — Meaning of ‘activity which falls outside the scope of Union law’ — Article 4(7) — Concept of ‘controller’ — Petitions Committee of the parliament of a Federated State of a Member State — Article 15 — Right of access by the data subject.

Outcome of the case:

On those grounds, the Court (Third Chamber) hereby rules:

Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) must be interpreted as meaning that, in so far as a Petitions Committee of the parliament of a Federated State of a Member State determines, alone or with others, the purposes and means of the processing of personal data, that committee must be categorised as a ‘controller’, within the meaning of that provision, and consequently the processing of personal data carried out by that committee falls within the scope of that regulation and, in particular, of Article 15 thereof.