Based on the GDPR, data controllers have several obligations, such as maintaining the records of data processing or in case of joint controllers, entering into an agreement which determines their respective responsibilities for compliance with their data protection related obligations. In a recent case, the Court of Justice of the European Unio (‘CJEU’) needed to decide on the issue whether the non-compliance with these obligations constitutes unlawful processing resulting in the duty to erase the personal data of the data subject.

By 25 June 2023, the transitional provisions of the Collective Redress Directive should have been applicable throughout the EU. Austria – like several other EU Member States – did not meet this deadline. The following article deals with potential transposition options, for the Collective Redress Directive, by the Austrian legislator.

Chapter 1 - A commercial offence – a brief review of an unjustifiably neglected step between a misdemeanour and a criminal offence.

The Court of Justice’s strike on protectionism in favor of ‘strategic companies’ in the Member States.

Cobalt successfully represented TREV-2 Group in a lawsuit involving a former employee sending several sensitive employer materials to their personal e-mail address shortly before the termination of his employment.

JPM & Partners has successfully represented the interests of Colas Rail in an arbitration proceeding against a subcontractor and its bank.