This article establishes the "Golden Rules" of data protection, including lawfulness, fairness, and transparency .

For in-depth study, legal practitioners often refer to specialized texts like The EU General Data Protection Regulation (GDPR): A Commentary by Bygrave and Docksey.

In Schrems v Meta (C-446/21), the CJEU emphasized data minimisation , ruling that personal data cannot be processed indefinitely for targeted advertising without strict temporal limits. Article 6: Lawfulness of Processing

Adopted a broad interpretation of health data, including orders for non-prescription medicines. (C-807/21)

Anyone who has suffered damage due to a GDPR infringement has the right to receive compensation from the controller or processor.

Individuals have the right to obtain a copy of their data and information on how it is used.

Invalidated the EU-US Privacy Shield due to US surveillance concerns. (C-21/23)