{"id":570,"date":"2023-05-05T11:17:28","date_gmt":"2023-05-05T09:17:28","guid":{"rendered":"https:\/\/www.lindenbaum.nl\/?p=570"},"modified":"2023-05-15T09:08:04","modified_gmt":"2023-05-15T07:08:04","slug":"gdpr-infringements-and-damages-claims-the-ui-case-explained","status":"publish","type":"post","link":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/","title":{"rendered":"GDPR infringements and damages claims: the UI-case explained"},"content":{"rendered":"\n<p>The ECJ has provided its decision in the UI\/\u00d6sterreichische Post AG case (\u201c<strong>UI-case<\/strong>\u201d). The decision is important, because it further clarifies under which conditions damages can be claimed in response to GDPR-infringements. In this contribution, we outline the key findings by the ECJ in the UI-case.<\/p>\n\n\n\n<p>You can find the case here (in English): <a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf;jsessionid=B12B4997407202A06E420B6458DAD685?text=&amp;docid=273284&amp;pageIndex=0&amp;doclang=EN&amp;mode=req&amp;dir=&amp;occ=first&amp;part=1&amp;cid=4873969\">CURIA &#8211; Documents (europa.eu)<\/a><\/p>\n\n\n\n<p><strong>Three cumulative conditions for damage claims, and a EU concept for damage<\/strong><\/p>\n\n\n\n<p>As expected, the ECJ finds that a \u201cmere infringement\u201d of the GDPR is insufficient to claim damages based on article 82 GDPR. There are instead three cumulative conditions to bring a damages claim. There must be: (i) an infringement, (ii) some form of damage suffered and (iii) a causal link between the damage and the infringement (finding 32). We note that this fits well with most civil law traditions, and specifically the Dutch civil law system.<\/p>\n\n\n\n<p>Importantly, the UI-case also (re)confirms that the concept of \u2018damage\u2019 and \u2018compensation for the damage suffered\u2019 are autonomous concepts of EU law which must be interpreted in a uniform manner in all member states (findings 30, 44). This is of relevance, given that in previous case law, the ECJ has already found that feelings of psychological harm can also give rise to non-material damages (See, e.g. ECJ 4 April 2017, ECLI:EH:C:2017:256, findings 129 \u2013 130. <a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf?text=&amp;docid=189543&amp;pageIndex=0&amp;doclang=EN&amp;mode=req&amp;dir=&amp;occ=first&amp;part=1&amp;cid=4883997\">CURIA &#8211; Documents (europa.eu)<\/a>).<\/p>\n\n\n\n<p><strong>Barriers such as national de minimis rules are not allowed<\/strong><\/p>\n\n\n\n<p>The court finds that member states may not introduce rules or practices which make compensation for non-material damage subject to the condition that the damage suffered reaches a certain degree of seriousness (findings 43 \u2013 51). This entails that any form of damage suffered, even a very small amount (such as physical distress), can in principle be deemed \u2018damage\u2019 within the scope and ambit of article 82 GDPR.<\/p>\n\n\n\n<p><strong>National procedural rules must comply with principles of equivalence and effectiveness<\/strong><\/p>\n\n\n\n<p>The member states are free to prescribe the detailed rules for safeguarding the rights individuals derive from article 82 GDPR, given that EU law does not set such rules (finding 54). This includes the right to prescribe the criteria to determine the extent of compensation payable for infringements of GDPR-rights.<\/p>\n\n\n\n<p>However, and importantly, the ability to set procedural rules is subject to compliance with the principles of equivalence and effectiveness. This entails that the procedural rights must be such that the data subject can effectively safeguard his or her rights under the GDPR. There must be full and effective compensation for the damage that is suffered (finding 57).<\/p>\n\n\n\n<p>The ECJ explains what it means by referring by analogy to the well-established case law dealing with competition law damages claims, where the ECJ also decided that victims of EU-law infringements can base damages claims directly on EU law, and that member states may prescribe procedural rules, but only as long as such rules do not undermine the effectiveness of EU law (finding 54, a reference to Manfredi, ECJ 13 July 2006, ECLI:EU:C:2006:461, <a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf?text=&amp;docid=56474&amp;pageIndex=0&amp;doclang=EN&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=4886475\">CURIA &#8211; Documents (europa.eu)<\/a>).<\/p>\n\n\n\n<p><strong>Contact Lindenbaum to learn more<\/strong><\/p>\n\n\n\n<p>The attorneys at Lindenbaum have been litigation counsel in some of the largest GDPR damages actions in Europe. Contact Lindenbaum to learn more about private enforcement of the GDPR.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The ECJ has provided its decision in the UI\/\u00d6sterreichische Post AG case (\u201cUI-case\u201d). The decision is important, because it further clarifies under which conditions damages can be claimed in response to GDPR-infringements. In this contribution, we outline the key findings by the ECJ in the UI-case. You can find the case here (in English): CURIA [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[30,14],"class_list":["post-570","post","type-post","status-publish","format-standard","hentry","category-insights","tag-gdpr","tag-litigation"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GDPR infringements and damages claims: the UI-case explained - Lindenbaum<\/title>\n<meta name=\"description\" content=\"In this post we comment on the conditions under which damages can be claimed for GDPR infringments. The UI case provides the key rules.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR infringements and damages claims: the UI-case explained - Lindenbaum\" \/>\n<meta property=\"og:description\" content=\"In this post we comment on the conditions under which damages can be claimed for GDPR infringments. The UI case provides the key rules.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/\" \/>\n<meta property=\"og:site_name\" content=\"Lindenbaum\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-05T09:17:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-15T07:08:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.lindenbaum.nl\/wp-content\/uploads\/2023\/03\/lindenbaum.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2020\" \/>\n\t<meta property=\"og:image:height\" content=\"638\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Dami\u00ebn Berkhout\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschreven door\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dami\u00ebn Berkhout\" \/>\n\t<meta name=\"twitter:label2\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/gdpr-infringements-and-damages-claims-the-ui-case-explained\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/gdpr-infringements-and-damages-claims-the-ui-case-explained\\\/\"},\"author\":{\"name\":\"Dami\u00ebn Berkhout\",\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#\\\/schema\\\/person\\\/9c5bbb66d6ac55128d0fbea96b9aa822\"},\"headline\":\"GDPR infringements and damages claims: the UI-case explained\",\"datePublished\":\"2023-05-05T09:17:28+00:00\",\"dateModified\":\"2023-05-15T07:08:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/gdpr-infringements-and-damages-claims-the-ui-case-explained\\\/\"},\"wordCount\":532,\"publisher\":{\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#organization\"},\"keywords\":[\"GDPR\",\"litigation\"],\"articleSection\":[\"Insights\"],\"inLanguage\":\"nl-NL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/gdpr-infringements-and-damages-claims-the-ui-case-explained\\\/\",\"url\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/gdpr-infringements-and-damages-claims-the-ui-case-explained\\\/\",\"name\":\"GDPR infringements and damages claims: the UI-case explained - Lindenbaum\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#website\"},\"datePublished\":\"2023-05-05T09:17:28+00:00\",\"dateModified\":\"2023-05-15T07:08:04+00:00\",\"description\":\"In this post we comment on the conditions under which damages can be claimed for GDPR infringments. The UI case provides the key rules.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/gdpr-infringements-and-damages-claims-the-ui-case-explained\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/gdpr-infringements-and-damages-claims-the-ui-case-explained\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/gdpr-infringements-and-damages-claims-the-ui-case-explained\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR infringements and damages claims: the UI-case explained\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/\",\"name\":\"Lindenbaum\",\"description\":\"Strategic thinking. Creative solutions. Pragmatic advice.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#organization\"},\"alternateName\":\"Our mission is to resolve our clients' disputes effectively and decisively\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#organization\",\"name\":\"Lindenbaum\",\"url\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.lindenbaum.nl\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/lindenbaum.png\",\"contentUrl\":\"https:\\\/\\\/www.lindenbaum.nl\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/lindenbaum.png\",\"width\":2020,\"height\":638,\"caption\":\"Lindenbaum\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.lindenbaum.nl\\\/nl\\\/#\\\/schema\\\/person\\\/9c5bbb66d6ac55128d0fbea96b9aa822\",\"name\":\"Dami\u00ebn Berkhout\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR infringements and damages claims: the UI-case explained - Lindenbaum","description":"In this post we comment on the conditions under which damages can be claimed for GDPR infringments. The UI case provides the key rules.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/","og_locale":"nl_NL","og_type":"article","og_title":"GDPR infringements and damages claims: the UI-case explained - Lindenbaum","og_description":"In this post we comment on the conditions under which damages can be claimed for GDPR infringments. The UI case provides the key rules.","og_url":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/","og_site_name":"Lindenbaum","article_published_time":"2023-05-05T09:17:28+00:00","article_modified_time":"2023-05-15T07:08:04+00:00","og_image":[{"width":2020,"height":638,"url":"https:\/\/www.lindenbaum.nl\/wp-content\/uploads\/2023\/03\/lindenbaum.png","type":"image\/png"}],"author":"Dami\u00ebn Berkhout","twitter_card":"summary_large_image","twitter_misc":{"Geschreven door":"Dami\u00ebn Berkhout","Geschatte leestijd":"3 minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/#article","isPartOf":{"@id":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/"},"author":{"name":"Dami\u00ebn Berkhout","@id":"https:\/\/www.lindenbaum.nl\/nl\/#\/schema\/person\/9c5bbb66d6ac55128d0fbea96b9aa822"},"headline":"GDPR infringements and damages claims: the UI-case explained","datePublished":"2023-05-05T09:17:28+00:00","dateModified":"2023-05-15T07:08:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/"},"wordCount":532,"publisher":{"@id":"https:\/\/www.lindenbaum.nl\/nl\/#organization"},"keywords":["GDPR","litigation"],"articleSection":["Insights"],"inLanguage":"nl-NL"},{"@type":"WebPage","@id":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/","url":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/","name":"GDPR infringements and damages claims: the UI-case explained - Lindenbaum","isPartOf":{"@id":"https:\/\/www.lindenbaum.nl\/nl\/#website"},"datePublished":"2023-05-05T09:17:28+00:00","dateModified":"2023-05-15T07:08:04+00:00","description":"In this post we comment on the conditions under which damages can be claimed for GDPR infringments. The UI case provides the key rules.","breadcrumb":{"@id":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.lindenbaum.nl\/nl\/gdpr-infringements-and-damages-claims-the-ui-case-explained\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.lindenbaum.nl\/nl\/"},{"@type":"ListItem","position":2,"name":"GDPR infringements and damages claims: the UI-case explained"}]},{"@type":"WebSite","@id":"https:\/\/www.lindenbaum.nl\/nl\/#website","url":"https:\/\/www.lindenbaum.nl\/nl\/","name":"Lindenbaum","description":"Strategic thinking. Creative solutions. Pragmatic advice.","publisher":{"@id":"https:\/\/www.lindenbaum.nl\/nl\/#organization"},"alternateName":"Our mission is to resolve our clients' disputes effectively and decisively","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.lindenbaum.nl\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Organization","@id":"https:\/\/www.lindenbaum.nl\/nl\/#organization","name":"Lindenbaum","url":"https:\/\/www.lindenbaum.nl\/nl\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/www.lindenbaum.nl\/nl\/#\/schema\/logo\/image\/","url":"https:\/\/www.lindenbaum.nl\/wp-content\/uploads\/2023\/03\/lindenbaum.png","contentUrl":"https:\/\/www.lindenbaum.nl\/wp-content\/uploads\/2023\/03\/lindenbaum.png","width":2020,"height":638,"caption":"Lindenbaum"},"image":{"@id":"https:\/\/www.lindenbaum.nl\/nl\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.lindenbaum.nl\/nl\/#\/schema\/person\/9c5bbb66d6ac55128d0fbea96b9aa822","name":"Dami\u00ebn Berkhout"}]}},"_links":{"self":[{"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/posts\/570","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/comments?post=570"}],"version-history":[{"count":4,"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/posts\/570\/revisions"}],"predecessor-version":[{"id":576,"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/posts\/570\/revisions\/576"}],"wp:attachment":[{"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/media?parent=570"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/categories?post=570"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lindenbaum.nl\/nl\/wp-json\/wp\/v2\/tags?post=570"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}