Advocate General Giovanni Pitruzzella considers that unlawful access to personal data by a third party leads to liability for presumed fault on the part of the controller and may give rise to non-material damage for which compensation can be awarded. Its conclusions, delivered to the Court of Justice of the EU on Thursday 27 April, follow a questioning by the Bulgarian Supreme Administrative Court on the interpretation of the General Data Protection Regulation (GDPR) in case C-340/21...