Joined Cases C‑182/22 and C‑189/22

JU
and
SO v Scalable Capital GmbH

(Request for a preliminary ruling from the Amtsgericht München)

Judgment of the Court (Third Chamber) of 20 June 2024

(References for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (UE) 2016/679 – Article 82 – Right to compensation for damage caused by data processing that infringes that regulation – Concept of ‘non-material damage’ – Compensation of a punitive nature or purely in respect of damages and satisfaction – Minimal or symbolic compensation – Theft of personal data stored on a trading application – Identity theft or fraud)

1. Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Right to compensation and liability – Right to compensation for the damage suffered – Compensatory function – Compensation in full for the damage suffered – Dissuasive or punitive function – None

   (European Parliament and Council Regulation 2016/679, Art. 82(1))

2. Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Right to compensation and liability – Right to compensation for the damage suffered – Determination of the amount of damages payable – Application of national rules relating to the extent of financial compensation – Condition – Respect for the principles of equivalence and effectiveness – No taking into account the degree of seriousness of the fault committed by the controller – No taking into account the intentional nature of the infringement of the regulation

   (European Parliament and Council Regulation 2016/679, Art. 82(1))

   (see paragraphs 27-30, operative part 2)

3. Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Right to compensation and liability – Right to compensation for the damage suffered – Determination of the amount of damages payable – Application of national rules relating to the extent of financial compensation – Condition – Respect for the principles of equivalence and effectiveness – Assessment of non-material damage – No increased significance of physical injury

   (European Parliament and Council Regulation 2016/679, recitals 75, 85 and 146, and Art. 82(1))

   (see paragraphs 32, 33, 38, 39, operative part 3)

4. Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Right to compensation and liability – Right to compensation for the damage suffered – Conditions – Mere infringement of the provisions of that regulation in the absence of damage – No right to compensation – Obligation of the person concerned to prove the existence of damage

   (European Parliament and Council Regulation 2016/679, Art. 82(1))

   (see paragraphs 41, 42, 44, operative part 4)

5. Protection of natural persons with regard to the processing of personal data – Regulation 2016/679 – Right to compensation and liability – Right to compensation for the damage suffered – Conditions – Identity theft or fraud – Concept – Right to compensation for non-material damage caused by the theft of personal data – Scope

   (European Parliament and Council Regulation 2016/679, recitals 75 and 85, Art. 82(1))

   (see paragraphs 52-56, operative part 5)

See the text of the decision.