Decisions made by a national supervisory authority in the context of the indirect exercise of a person’s rights relating to the processing of their personal data are legally binding, ruled the Court of Justice of the European Union (CJEU) in a judgment handed down on Thursday 16 November (Case C-333/22).
In Belgium, a citizen was refused security clearance by the national security authority for professional purposes, on the grounds that he had taken part in demonstrations. He is...