DPO SchoolDPO School

Court of Justice judgment · Case C-687/21

BL v MediaMarktSaturn Hagen-Iserlohn GmbH

Reviewed by Sergio Maldonado Elvira on 29 October 2026

Case
C-687/21
Court
Court of Justice
Date of judgment
25 January 2024
ECLI
ECLI:EU:C:2024:72
Instrument
Regulation (EU) 2016/679 (GDPR)

Holding (summary, not the official text)

Staff mistakenly handing a document to the wrong person does not by itself show inadequate security measures; compensation is compensatory only; where the wrong recipient demonstrably did not read the data, a purely hypothetical risk of misuse is not damage.

Checked against the official source on 28 October 2026.

Only the judgment as published by the Court of Justice is authoritative. This is reference material, not legal advice.

All judgments