IP case law Court of Justice

Referral C-77/21 (Digi, 8 Feb 2021)



1. Must the concept of ‘purpose limitation’ as defined in Article 5(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the ‘Regulation’), be interpreted as meaning that the fact that the controller stores in parallel in another database personal data which were otherwise collected and stored for a limited legitimate purpose is consistent with that concept or, conversely, is the limited legitimate purpose of collecting those data no longer valid so far as the parallel database is concerned?
2. Should the answer to the first question referred be that the parallel storage of data is in itself incompatible with the principle of ‘purpose limitation’, is the fact that the controller stores in parallel in another database personal data which were otherwise collected and stored for a limited legitimate purpose compatible with the principle of ‘storage limitation’ established in Article 5(1)(e) of the
Regulation?


Case details on the CJEU website (external link)


Disclaimer