EU Court of Justice · 5 December 2023
Deutsche Wohnen
In plain English
A company can be fined under the GDPR without first pinning the breach on a named manager or employee. But a fine is only possible if the company committed the breach intentionally or negligently.
What the court ruled
an administrative fine may be imposed pursuant to that provision only where it is established that the controller, which is both a legal person and an undertaking, intentionally or negligently committed an infringement referred to in Article 83(4) to (6) thereof.
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the court’s own records is authoritative. The plain-English line is Fino’s own summary, not legal advice.