Requested by the Budapest High Court (Hungary) to interpret the General Data Protection Regulation (GDPR), the Court of Justice of the EU handed down a judgment on Thursday 14 March in which it ruled that the data protection authority of a Member State may order that Member State to delete data processed unlawfully, even in the absence of a prior request from the data subject (Case C-46/23).
This ruling follows a case between the Hungarian Data Protection Authority and the municipal...