{"id":136791,"date":"2026-07-26T14:13:04","date_gmt":"2026-07-26T14:13:04","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/26\/cjeu-blocks-swedens-gdpr-exemption-reviving-sek-300000-damages-claim\/"},"modified":"2026-07-26T14:14:05","modified_gmt":"2026-07-26T14:14:05","slug":"cjeu-blocks-swedens-gdpr-exemption-reviving-sek-300000-damages-claim","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/26\/cjeu-blocks-swedens-gdpr-exemption-reviving-sek-300000-damages-claim\/","title":{"rendered":"CJEU blocks Sweden’s GDPR exemption, reviving SEK 300,000 damages claim"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

The Courtroom of Justice of the European Union dominated on 9 July 2026 that promoting entry to courtroom judgments doesn’t, in itself, make an organization a writer, and that no member state could swap off the regulation’s treatments by invoking its personal structure.<\/em><\/p>\n

The Fifth Chamber delivered its judgment in Case C-199\/24, ND v Authorized Newsdesk Sweden AB, on 9 July 2026 in Luxembourg. Three questions had been referred by the Attunda tingsr\u00e4tt, a district courtroom north of Stockholm. All three have been answered in opposition to the operator of a industrial database of Swedish prison convictions, and the reasoning reaches nicely past the corporate that misplaced.<\/p>\n

At difficulty was Article 85 of the\u00a0GDPR<\/a>, the supply that instructs member states to reconcile knowledge safety with freedom of expression. Sweden had learn that instruction expansively. The courtroom learn it narrowly, and in doing so drew a line that any organisation monetising private knowledge will now need to find itself in opposition to.<\/p>\n

What the courtroom determined<\/h2>\n

The judgment is brief in its operative half and dense in its reasoning. Three rulings emerged.<\/p>\n

First, Article 85(1) doesn’t authorise member states to legislate past what Article 85(2) permits. Nationwide measures can not introduce derogations from chapters of the regulation for processing carried out for functions aside from journalistic, educational, inventive or literary expression, even the place a authorities argues that such measures are essential to steadiness knowledge safety in opposition to free expression.<\/p>\n

Second, member states could not cut back a convicted particular person’s authorized treatments to defamation proceedings alone. The place private knowledge about prison convictions are made obtainable on-line for fee, the affected person retains the treatments granted instantly by the regulation.<\/p>\n

Third, making public paperwork consisting of prison convictions obtainable on-line in return for fee can’t be handled as processing for\u00a0journalistic functions<\/strong>\u00a0until the exercise meets an outlined set of circumstances: disclosure to the general public of data, opinions or concepts, in compliance with the moral guidelines and codes of conduct of the journalistic occupation, following modifying or adaptation or a minimum of an editorial coverage, and after verification of the factual allegations involved.<\/p>\n

Based on the Courtroom of Justice press launch issued on 9 July 2026, the act of putting prison convictions on-line for fee “doesn’t seem” to fulfill these circumstances, topic to verification by the nationwide courtroom.<\/p>\n

From a 2011 conviction to Luxembourg<\/h2>\n

The info are slim. Authorized Newsdesk Sweden AB, previously Garrapatica AB, operates Lexbase, a database permitting searches on people and firms which were social gathering to prison proceedings earlier than Swedish courts. The applicant, recognized within the proceedings as ND, was convicted of a prison offence by a judgment dated 17 January 2011. That judgment was printed on Lexbase and remained accessible till February 2024.<\/p>\n

ND requested the corporate to erase his private knowledge. The info weren’t eliminated instantly. Erasure got here later, and on the premise of the corporate’s personal inside knowledge storage coverage slightly than in response to the request. ND then sued on the Attunda tingsr\u00e4tt, looking for damages of 300,000 Swedish kronor, roughly 26,000 euros, plus curiosity.<\/p>\n

The defence turned on a single Swedish instrument. Authorized Newsdesk Sweden invoked its\u00a0utgivningsbevis<\/strong>, a certificates of constitutional safety for freedom of expression issued by the Myndigheten f\u00f6r press, radio och television, the Swedish Press and Broadcasting Authority. Below Swedish legislation, that certificates has a placing consequence: it removes the database from the attain of the GDPR altogether.<\/p>\n

The Swedish constitutional structure<\/h3>\n

Two legal guidelines of constitutional standing govern the world. The Tryckfrihetsf\u00f6rordningen (1949:105) covers freedom of the press. The Yttrandefrihetsgrundlagen (1991:1469) covers freedom of expression, together with sure classes of web site the place a certificates has been granted.<\/p>\n

The bridge to European legislation sits in Chapter 1, Paragraph 7 of Legislation 2018:218 of 19 April 2018, which supplies that the GDPR doesn’t apply the place its utility would contravene both constitutional legislation. The sensible impact for a certificates holder is that the one routes open to an aggrieved particular person are prison proceedings for defamation or a civil declare for defamation damages. Below the Yttrandefrihetsgrundlagen, figuring out somebody as having a prison or culpable life-style can represent defamation, however the act isn’t punishable the place disclosure was justified and the data was true or fairly believed to be true.<\/p>\n

That could be a materially greater bar than the regulation’s personal treatments, which require neither falsity nor reputational harm. The referring courtroom, harbouring doubts in regards to the compatibility of this association with EU legislation, stayed proceedings and referred its questions by choice of 1 March 2024. The reference reached the Courtroom of Justice on 13 March 2024 and was printed within the Official Journal on 3 Could 2024.<\/p>\n

Article 85 learn in opposition to its personal wording<\/h2>\n

The courtroom started with textual content. Article 85(1) requires member states to reconcile the 2 rights by legislation. It says nothing about exemptions or derogations. Article 85(2), in contrast, requires exemptions or derogations from Chapters II to VII and IX the place essential, and just for processing carried out for journalistic functions or for tutorial, inventive or literary expression.<\/p>\n

The judges characterised the primary paragraph as a common obligation and the second as a particular rule confined to these particular functions. Recital 153 helps that division, describing the target of Article 85 as enabling derogations solely within the context of these types of expression. As a result of Article 85(2) defines its scope exhaustively, the exemptions it authorises should be construed strictly.<\/p>\n

Advocate Normal Maciej Szpunar, whose opinion was delivered on 4 September 2025 in English, had famous that the phrase “together with” in Article 85(1) reveals that journalistic and expressive processing type solely a part of what could also be reconciled below that paragraph. The courtroom accepted the linguistic level and declined to attract the consequence Sweden wished from it. Reconciliation below paragraph 1 could also be broad. The ability to derogate below paragraph 2 isn’t.<\/p>\n

Treatments that can not be switched off<\/h2>\n

The second ruling is the one with the widest sensible attain, and it rests on an argument from omission.<\/p>\n

Chapter VIII of the regulation, headed treatments, legal responsibility and penalties, incorporates Article 77(1) on complaints to a supervisory authority, Article 78(1) and (2) on judicial treatments in opposition to supervisory authorities, Article 79(1) on judicial treatments in opposition to controllers and processors, and Article 82(1) on compensation for materials and non-material harm. Chapter VIII doesn’t seem within the checklist of chapters from which Article 85(2) permits derogation.<\/p>\n

The courtroom drew the inference instantly. If Article 85(1) can not authorise the derogations contemplated by Article 85(2) for non-qualifying functions, it can not authorise derogation from Chapter VIII both. These provisions are instantly relevant and confer rights that member states could not topic to substantive circumstances of their very own devising.<\/p>\n

Procedural autonomy survives, inside limits. Member states set the detailed procedural guidelines for exercising the treatments, offered these guidelines are not any much less beneficial than these making use of to comparable home conditions and don’t make the train of EU rights unattainable in follow or excessively troublesome. The excellence the judgment attracts is between process, which stays nationwide, and substance, which doesn’t.<\/p>\n

A 3-part take a look at for journalism<\/h2>\n

The third query pressured the courtroom to say what journalism is for the needs of European knowledge safety legislation, a definition the regulation itself by no means provides.<\/p>\n

The Bulgarian authorities argued the query was inadmissible, on the premise that the referring courtroom’s account didn’t allow the aim of the processing to be recognized or its compliance with Article 10 to be assessed. The courtroom disagreed: deciphering the time period doesn’t require data of the precise function, and questions referred by nationwide courts get pleasure from a presumption of relevance.<\/p>\n

On substance, the judges assembled a take a look at from case legislation of the European Courtroom of Human Rights, imported via Article 52(3) of the Constitution. Three components emerged. Journalistic exercise presupposes modifying or adaptation of the fabric disclosed, carried out on an everyday or skilled foundation, or at minimal publication in accordance with editorial selections. It presupposes that factual allegations have been verified to a adequate normal of reliability. And it presupposes compliance with the occupation’s moral guidelines and codes of conduct.<\/p>\n

The courtroom additionally learn the phrase “functions” to increase the scope of Article 85(2) backwards via the manufacturing course of. Processing essential for publication qualifies, not merely the act of publication itself. As a result of journalistic work entails choice and prioritisation, the reasoning covers operations on private knowledge contained in materials that was gathered and in the end not used. That time protects newsroom pipelines slightly than proscribing them.<\/p>\n

Utilized to Lexbase, the take a look at produced a unfavorable reply. Making conviction paperwork obtainable on-line for a charge doesn’t seem to require modifying or adaptation, nor to comply with an editorial coverage, and nothing earlier than the courtroom indicated the corporate was topic to journalistic moral guidelines. The judges added an additional situation: paperwork of that sort could also be genuinely helpful to journalists, however processing them counts as journalistic solely the place they’re meant completely for such exercise. The place anybody can retrieve a conviction on the only real situation of fee, that exclusivity is absent.<\/p>\n

Verification of every of those factors falls to the Attunda tingsr\u00e4tt.<\/p>\n

What doesn’t disqualify a writer<\/h3>\n

The judgment is cautious about what it doesn’t determine. Two options of the Lexbase mannequin have been expressly held to be irrelevant to the classification query.<\/p>\n

Working on-line and charging for entry don’t preclude journalistic functions. The courtroom cited its personal 2008 ruling in Satakunnan Markkinap\u00f6rssi and Satamedia, which had reached the identical conclusion about industrial knowledge providers. Nor does the truth that processing considerations prison convictions rule out journalistic functions on the classification stage, despite the fact that Article 10 topics such knowledge to particular safety and reserves complete registers of convictions to official authority.<\/p>\n

Sensitivity of the info, the variety of folks with entry and the preparations for that entry stay related, however at a later stage: when assessing whether or not a derogation from a selected provision is justified, not when deciding whether or not the exercise is journalism in any respect. The sequence issues for anybody constructing a compliance argument.<\/p>\n

The industrial studying of this judgment has little to do with Swedish courtroom information and a fantastic deal to do with the construction of Article 85.<\/p>\n

Any enterprise that processes private knowledge and has been counting on a nationwide freedom-of-expression carve-out now is aware of the outer boundary of that shelter. The checklist in Article 85(2) is exhaustive and to be learn strictly, and Chapter VIII sits exterior it. Information topic complaints, judicial treatments and Article 82 compensation claims survive no matter a member state has legislated. For companies in id decision, folks search, enterprise knowledge enrichment and lead era, the publicity is a direct damages declare slightly than a regulatory dialog.<\/p>\n

That publicity isn’t theoretical. German courts have been awarding Article 82 damages in monitoring instances, with a Leipzig courtroom granting 5,000 euros in July 2025 and a Thuringian Increased Regional Courtroom awarding 3,000 euros in March 2026, the fourth Increased Regional Courtroom in Germany to search out for claimants in\u00a0Meta<\/a>\u00a0Enterprise Instruments proceedings. Personal litigation is the place the boundaries drawn on 9 July 2026 might be examined first.<\/p>\n

The three-part journalism take a look at additionally lands at an ungainly second for a media business restructuring round automated content material. Enhancing or adaptation, an editorial coverage, verified info and adherence to skilled moral codes at the moment are the standards that separate a writer from a knowledge vendor below European knowledge safety legislation. Websites that mixture and republish with out an editorial layer sit on the unsuitable facet of that line, no matter their masthead says.<\/p>\n

Enforcement context sharpens the purpose. Nationwide authorities issued 1,145,760,374 euros in GDPR fines throughout 2025 in response to the\u00a0EDPB’s annual report<\/a>, printed on 9 April 2026, whereas an evaluation printed in Could 2026 discovered that\u00a0close to 40 percent of 7.1 billion euros in cumulative fines<\/a>\u00a0has been annulled or is below problem. Administrative penalties are contested and infrequently lowered. Particular person claims below Chapter VIII are more durable to neutralise, which is exactly why a ruling defending them carries weight.<\/p>\n

Sweden’s supervisory authority has already been lively in adjoining territory. IMY issued a reprimand to Flightradar24 in June 2025 over its\u00a0handling of erasure requests and identity verification demands<\/a>, and fined Apoteket and Apohem 45 million kronor in 2024 for\u00a0transferring sensitive customer data to Meta through the pixel<\/a>. Neither case concerned a publishing certificates. After 9 July 2026, the certificates is a weaker reply than it was.<\/p>\n

The broader legislative image is unsettled. The European Fee’s Digital Omnibus, printed on 19 November 2025, proposes amendments to the definition of private knowledge, the professional curiosity foundation, the particular classes regime and the influence evaluation framework, and would have inserted a machine-readable consent sign as Article 88b. The\u00a0Council removed that provision in June 2026<\/a>\u00a0after lobbying through which\u00a0Google<\/a>\u00a0performed a central half, and the\u00a0EDPB and EDPS had already objected<\/a>\u00a0to the package deal in a joint opinion of 10 February 2026. Not one of the documented proposals reopens Article 85. The interpretation handed down on 9 July 2026 subsequently stands regardless of the simplification negotiations produce.<\/p>\n

For publishers particularly, the judgment cuts in two instructions. It confirms that preparatory processing, together with knowledge that by no means reaches publication, falls throughout the journalistic shelter, which is a real safety for investigative work. It additionally confirms that the shelter is conditional on skilled follow that may be demonstrated to a courtroom. Swedish and Norwegian publishers at present defending\u00a0pay-or-okay consent structures<\/a>\u00a0are studying the identical lesson from a unique angle: constitutional and industrial framing doesn’t substitute for compliance with the regulation as written.<\/p>\n

Timeline<\/h2>\n