On 9 July 2026, the EU Court of Justice (CJEU) delivered its judgment in Case C-199/24 (ND v Legal Newsdesk Sweden AB), clarifying the scope of exemptions and derogations under Article 85 of GDPR, which balances the right to data protection against the right to freedom of expression and information. The case concerned a Swedish company operating a commercial database of criminal proceedings, which refused to delete information relating to a data subject pursuant to Article 17 of GDPR, arguing that, as a media service provider benefiting from the exemption implemented under Article 85 of GDPR in Swedish law, its activity fell outside the scope of the GDPR.
The CJEU held that while Article 85(1) and (2) of GDPR requires Member States by law to reconcile the right to the protection of personal data with the freedom of expression and information, including for journalistic purposes and the purposes of academic, artistic or literary expression, Member States may not preclude the application of the GDPR in respect of the processing of data for other purposes. Nor can they deprive the person concerned of remedies guaranteed by the GDPR, by leaving them only the possibility of bringing criminal or civil proceedings for defamation. Instead, under Articles 77(1), 78(1) and (2), 79(1) and 82(1) of GDPR, that person must be able to exercise those remedies directly.
According to the CJEU, personal data are processed for “journalistic purposes” where the objective of that processing is to inform the public or to disclose opinions or ideas, where the content is prepared according to ethical rules or codes of conduct and has been edited or adapted, or at least is in line with an editorial policy, and the facts presented must have been verified. Consequently, the act of placing online, in return for payment, criminal convictions, does not appear, subject to verification by the national Court, to fulfil those conditions or be capable of being regarded as carried out for journalistic purposes.
Newsletter n. 120 – July 2026
| Cookie | Duration | Description |
|---|---|---|
| Cookie per la sicurezza | 1 hour | We use a plugin to protect our website from malware, spambot or other violation attach. These cookies are necessary also to protect your personal data and all orders informations. |
| cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
| cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
| cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
| cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other”. |
| cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
| Languages preference | This cookie is used to maintain the user session variables and in particular to memorize the navigation language in order to deliver the contents in the chosen language | |
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
| Cookie | Duration | Description |
|---|---|---|
| Newsletter | We use the Campaign Monitor API to enable you to subscribe to the newsletter. We save your email address (only with your explicit consent and manual action to add you to the list) to send you any updates and communications. For more information read the service policy https://www.campaignmonitor.com/policies/ |
| Cookie | Duration | Description |
|---|---|---|
| Cache plugin | 1 hour | This cookie is used for local caching purposes to improve the website loading time. |
| Cookie | Duration | Description |
|---|---|---|
| Google Analytics | from 30 seconds to 14 months | We use this Cookie to understand how you interact with content, your time spent on the site, the pages you view and other information. All data is anonymous this means that they will never be associated with you but used only for statistical purposes. _ga Registers a unique ID used to generate statistical data on how the visitor uses the website. _gid To distinguish the user (duration 24 hours) _gat To limit the speed of the request (30 seconds) _gali For advanced link attribution |
| Google Tag Manager | from 30 seconds to 14 months | Google Tag Manager manages statistical scripts or marketing tags. These tags set cookies, which collect data from your users to compile statistics and marketing analysis. |
| Cookie | Duration | Description |
|---|---|---|
| Google Tag Manager | from 30 seconds to 14 months | Google Tag Manager manages statistical scripts or marketing tags. These tags set cookies, which collect data from your users to compile statistics and marketing analysis. |