Skip to main content
Praxikon

Direct answer · GDPR

Is someone entitled to compensation if the GDPR has been infringed?

Short answer

Only if there is also damage. Anyone who has suffered material or non-material damage as a result of an infringement of the GDPR has the right to compensation (Article 82(1)). According to the Court of Justice in Österreichische Post, the mere infringement is not enough: there must be damage caused by it. National law may not, however, set a threshold of seriousness for non-material damage.

Direct answer · GDPR

Compensation for a GDPR infringement

Only if there is also damage. Anyone who has suffered material or non-material damage as a result of an infringement of the GDPR has the right to receive compensation (Article 82(1)). The Court of Justice held in Österreichische Post that the mere infringement is not enough: there must be damage caused by the infringement. National law may not, however, set a threshold of seriousness for non-material damage.

For you to establish

  • What damage is there, and was it caused by the infringement?

Articles

Case law

  • Österreichische Post (damages) (CJEU, C-300/21, ECLI:EU:C:2023:370, 2023-05-04)Operative part: a mere infringement is not enough; no threshold of seriousness for non-material damage.
Read the article Check your own case General interpretation, not legal advice. The official source remains authoritative.

Check your own situation

Describe your system or project in the free case check and get a reasoned first assessment of, among other things, the DPIA obligation, Article 22 GDPR and the AI Act, with the source for every conclusion.

Go to the free case check
Zahed Ashkara, jurist and freelance AI & Privacy Consultant

Behind this page

Zahed Ashkara

Freelance AI & Privacy Consultant, jurist