
João Pedro Sousa (master’s student in European Union Law at the School of Law of the University of Minho)
1. Introduction
Protecting personal data is a cornerstone of the European Union (EU) legal framework, safeguarded by Article 8 of the Charter of Fundamental Rights of the European Union (CFREU) and Article 16 of the Treaty on the Functioning of the European Union (TFEU), especially since the entry into force of the General Data Protection Regulation (GDPR). This regulation aims to ensure citizens’ privacy and establish clear standards for using personal data by both public and private entities.[1] However, international data transfer became particularly prominent, specifically after the Schrems II case exposed vulnerabilities in transatlantic data protection relations and the consequent annulment of the Privacy Shield by the Court of Justice of the European Union (CJEU).[2]
The judgment in case T-354/22, of January 8, 2025, known as Bindl v. Commission, delivered by the General Court (GC),[3] represents a milestone in strengthening the guarantees provided by the GDPR. For the first time, the European Commission was ordered to pay compensation for moral damages resulting from infringing stringent data protection laws.[4] This case, initiated by an EU citizen, concerns the improper transfer of personal data of users of the Conference on the Future of Europe (CFE) website to the United States (US), in violation of the regulation.[5]
Continue reading “Compensation for unlawful data transfers: The T-354/22 judgment (Bindl v. Commission) in perspective”

