CJEU C-300/21: No De Minimis Threshold for GDPR Damages (Austrian Post)
Validated facts
Landmark judgment on Post AG, which had calculated citizens' political affinities. The CJEU clarified: There is no de minimis threshold for damages under Art. 82 GDPR. But: A pure legal violation without tangible damage is not enough.
In plain language
Small pains count too: You need not be bankrupt to get justice; anyone demonstrably embarrassed by a data breach is entitled to compensation.
Security relevance & practical tip
Laid the foundation for all current GDPR damages claims in Europe.
Primary source / reference
- EuGH Urteil vom 04.05.2023 – C-300/21