Thursday 14th December 2023
Judgment in Case C-340/21 Natsionalna agentsia za prihodite
(Approximation of laws)
The Bulgarian National Agency for Public Revenues (NAP) is an authority attached to the Bulgarian Minister of Finance. In addition to its usual debt collection duties, it is also responsible for processing personal data.
On 15 July 2019, the Bulgarian media announced that there had been unauthorised access to NAP’s computer system and that, as a result of this cyber-attack, personal data concerning millions of people had been published on the Internet. Many of these people took NAP to court to obtain compensation for non-material damage resulting from their concerns and fears about the future misuse of their personal data.
The Bulgarian Supreme Administrative Court referred several questions to the Court of Justice for a preliminary ruling on the interpretation of the General Data Protection Regulation (GDPR). It requested clarification on the conditions for compensation for non-material damage claimed by an individual whose personal data, in the possession of a public agency, was published on the internet following an attack by hackers.
Immaterieller Schadensersatz bei Datenleck wegen Hackerangriffs?
Aufgrund eines Hackerangriffs gegen die bulgarische Agentur für staatliche Einnahmen gelangten personenbezogene Daten tausender Bürger ins Internet. Eine Betroffene hat die Agentur vor den bulgarischen Gerichten auf immateriellen Schadensersatz in Höhe von umgerechnet gut 500 Euro verklagt. Sie macht geltend, dass die Agentur ihre Daten nicht hinreichend geschützt habe. Sie befürchtet, dass ihre offengelegten Daten künftig missbraucht werden, um auf ihr Eigentum und ihre Bankkonten zuzugreifen, um Kredite in ihrem Namen abzuschließen und ihre Identität zu stehlen.
Das mit dem Rechtsstreit befasste bulgarische Gericht hat den Gerichtshof um Präzisierung der Voraussetzungen für die Zuerkennung von immateriellem Schadensersatz nach der Datenschutzgrundverordnung ersucht.
Generalanwalt Pitruzzella hat in seinen Schlussanträgen vom 27. April 2023 die Ansicht vertreten, dass bei einem unbefugten Zugang zu personenbezogenen Daten durch Dritte der Verantwortliche für mutmaßliches Verschulden hafte und ein Ersatz des immateriellen Schadens in Betracht kommen könne (siehe Pressemitteilung Nr. 67/23).
We and use cookies and other tracking technologies to improve your experience on our website. We may store and/or access information on a device and process personal data, such as your IP address and browsing data, for personalised advertising and content, advertising and content measurement, audience research and services development. Additionally, we may utilize precise geolocation data and identification through device scanning.
Please note that your consent will be valid across all our subdomains. You can change or withdraw your consent at any time by clicking the “Consent Preferences” button at the bottom of your screen. We respect your choices and are committed to providing you with a transparent and secure browsing experience.
Cookie | Duration | Description |
---|---|---|
__stripe_mid | This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any patment information on a server. | |
__stripe_sid | This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any patment information on a server. | |
_abck | This cookie is used to detect and defend when a client attempt to replay a cookie.This cookie manages the interaction with online bots and takes the appropriate actions. | |
_wpfuuid | This cookie is used by the WPForms WordPress plugin. The cookie is used to allows the paid version of the plugin to connect entries by the same user and is used for some additional features like the Form Abandonment addon. | |
ASP.NET_SessionId | Issued by Microsoft's ASP.NET Application, this cookie stores session data during a user's website visit. | |
AWSALBCORS | This cookie is managed by Amazon Web Services and is used for load balancing. | |
bm_sz | This cookie is set by the provider Akamai Bot Manager. This cookie is used to manage the interaction with the online bots. It also helps in fraud preventions | |
cookielawinfo-checbox-analytics | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". | |
cookielawinfo-checbox-functional | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". | |
cookielawinfo-checbox-others | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. | |
cookielawinfo-checkbox-necessary | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". | |
cookielawinfo-checkbox-performance | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". | |
elementor | This cookie is used by the website's WordPress theme. It allows the website owner to implement or change the website's content in real-time. | |
JSESSIONID | Used by sites written in JSP. General purpose platform session cookies that are used to maintain users' state across page requests. | |
viewed_cookie_policy | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
Cookie | Duration | Description |
---|---|---|
_ga | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. | |
_ga_4L7PKQPHHV | This cookie is installed by Google Analytics. | |
_ga_T50H0MNN9J | This cookie is installed by Google Analytics. | |
_gat_gtag_UA_12289088_5 | Set by Google to distinguish users. | |
_gcl_au | Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services. | |
_gid | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
Cookie | Duration | Description |
---|---|---|
test_cookie | The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies. |
Cookie | Duration | Description |
---|---|---|
_mcid | No description available. | |
_swa_u | This cookie is set by the provider Sitewit.com. This cookie is used for statistical report and analysis. | |
ak_bmsc | No description available. | |
AWSALB | AWSALB is a cookie generated by the Application load balancer in the Amazon Web Services. It works slightly different from AWSELB. | |
ec_store_chameleon_font | No description available. | |
FCCDCF | No description available. | |
issuem_lp | No description available. | |
lp_us_his | No description | |
m | No description available. |