{"id":50325,"date":"2024-04-22T11:15:33","date_gmt":"2024-04-22T09:15:33","guid":{"rendered":"https:\/\/www.rplt.it\/update-moral-damage-and-data-breach-the-recent-judgement-of-the-european-court-of-justice\/"},"modified":"2024-05-13T16:28:28","modified_gmt":"2024-05-13T14:28:28","slug":"moral-damage-data-breach","status":"publish","type":"post","link":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/","title":{"rendered":"Update | Moral damage and data breach: the recent judgement of the European Court of Justice"},"content":{"rendered":"<p>Moral damage and data breach: the European Court of Justice (ECJ) has ruled on the interpretation of certain articles of the European Regulation on data protection (&#8220;GDPR&#8221;) to define the conditions for compensating damages to an individual whose personal data, held by a public agency, were published on the Internet following a hacker attack.<\/p>\n<p>Specifically, the Court has established that:<\/p>\n<ul>\n<li>in the event of unauthorized disclosure or unauthorized access to personal data (such as in cases of attacks by cybercriminals), judges must examine the adequacy of security measures concretely, without automatically assuming that they were inadequate under Articles 24 and 32 of the GDPR;<\/li>\n<li>the burden of proving the adequacy of the measures falls on the data controller, and resorting to judicial appraisal cannot systematically constitute a necessary and sufficient means of proof;<\/li>\n<li>the data controller may be liable to compensate for damages suffered by individuals, even in cases where the act was committed by cybercriminals, unless they can prove that the damage is not attributable to them;<\/li>\n<li>the fear of future potential misuse of the data by third parties can constitute a moral harm in itself, entitling to compensation.<\/li>\n<\/ul>\n<p>To read the whole italian verditic, <a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf;jsessionid=0D4F47F304C141C0740238B36D5D1CBC?text=&amp;docid=280623&amp;pageIndex=0&amp;doclang=IT&amp;mode=req&amp;dir=&amp;occ=first&amp;part=1&amp;cid=2787380\"> click here.<\/a><\/p>\n<p>The case arises from media reporting that the Bulgarian National Revenue Agency (NRA), responsible for safeguarding and recovering debts, was subject to a hacker attack resulting in the online publication of personal data of over six million individuals, both Bulgarian and foreign nationals.<\/p>\n<p>Following the event, numerous individuals sued the NRA for compensation for moral damages, and among them, one individual claimed damages for an amount just over \u20ac500 (in local currency, 1000 BGN).<\/p>\n<p>If you wish to read the Italian version of this article, <a href=\"https:\/\/www.rplt.it\/danno-morale-data-breach\/\">click here.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Moral damage and data breach: the European Court of Justice (ECJ) has ruled on&hellip;<\/p>\n","protected":false},"author":554,"featured_media":50221,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4181],"tags":[],"class_list":["post-50325","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy-data-protection-en"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Moral damage and data breach: the Euopean Court&#039;s judgement<\/title>\n<meta name=\"description\" content=\"Moral damage and data breach: defined the conditions for compensating damages caused by the disclosure of personal data following a hacker attack\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Moral damage and data breach: the Euopean Court&#039;s judgement\" \/>\n<meta property=\"og:description\" content=\"Moral damage and data breach: defined the conditions for compensating damages caused by the disclosure of personal data following a hacker attack\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"Rplt Rp Legalitax\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-22T09:15:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-13T14:28:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rplt.it\/wp-content\/uploads\/2024\/04\/data-breach-regulation.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Marilara Coppola\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marilara Coppola\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/\"},\"author\":{\"name\":\"Marilara Coppola\",\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#\\\/schema\\\/person\\\/b464a6e4b11984dac23893dd19d55510\"},\"headline\":\"Update | Moral damage and data breach: the recent judgement of the European Court of Justice\",\"datePublished\":\"2024-04-22T09:15:33+00:00\",\"dateModified\":\"2024-05-13T14:28:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/\"},\"wordCount\":296,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.rplt.it\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/data-breach-regulation.jpg\",\"articleSection\":[\"Privacy &amp; Data Protection\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/\",\"url\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/\",\"name\":\"Moral damage and data breach: the Euopean Court's judgement\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.rplt.it\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/data-breach-regulation.jpg\",\"datePublished\":\"2024-04-22T09:15:33+00:00\",\"dateModified\":\"2024-05-13T14:28:28+00:00\",\"description\":\"Moral damage and data breach: defined the conditions for compensating damages caused by the disclosure of personal data following a hacker attack\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.rplt.it\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/data-breach-regulation.jpg\",\"contentUrl\":\"https:\\\/\\\/www.rplt.it\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/data-breach-regulation.jpg\",\"width\":1280,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.rplt.it\\\/en\\\/moral-damage-data-breach\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.rplt.it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Update | Moral damage and data breach: the recent judgement of the European Court of Justice\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#website\",\"url\":\"https:\\\/\\\/www.rplt.it\\\/\",\"name\":\"Rplt Rp Legalitax\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.rplt.it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#organization\",\"name\":\"Rplt Rp Legalitax\",\"url\":\"https:\\\/\\\/www.rplt.it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.rplt.it\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/RPLT-legalitax_neg-1.png\",\"contentUrl\":\"https:\\\/\\\/www.rplt.it\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/RPLT-legalitax_neg-1.png\",\"width\":799,\"height\":482,\"caption\":\"Rplt Rp Legalitax\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},[{\"@type\":[\"Person\"],\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#\\\/schema\\\/person\\\/b464a6e4b11984dac23893dd19d55510\",\"name\":\"Marilara Coppola\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"\",\"inLanguage\":\"en_US\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fddb3a16160062ed153441be3b0fc6bb297bcaba7b2fdf0a5d45d57486c7392a?s=96&d=mm&r=g\",\"caption\":\"Marilara Coppola\"}},{\"@type\":[\"Person\"],\"@id\":\"https:\\\/\\\/www.rplt.it\\\/#\\\/schema\\\/person\\\/b464a6e4b11984dac23893dd19d55510\",\"name\":\"Ludovica Ceretto\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"\",\"inLanguage\":\"en_US\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/78acde8bafe6412b142864c689f4d8f9bc28311553ba89743e22419c72e65e17?s=96&d=mm&r=g\",\"caption\":\"Ludovica Ceretto\"}}]]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Moral damage and data breach: the Euopean Court's judgement","description":"Moral damage and data breach: defined the conditions for compensating damages caused by the disclosure of personal data following a hacker attack","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/","og_locale":"en_US","og_type":"article","og_title":"Moral damage and data breach: the Euopean Court's judgement","og_description":"Moral damage and data breach: defined the conditions for compensating damages caused by the disclosure of personal data following a hacker attack","og_url":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/","og_site_name":"Rplt Rp Legalitax","article_published_time":"2024-04-22T09:15:33+00:00","article_modified_time":"2024-05-13T14:28:28+00:00","og_image":[{"width":1280,"height":600,"url":"https:\/\/www.rplt.it\/wp-content\/uploads\/2024\/04\/data-breach-regulation.jpg","type":"image\/jpeg"}],"author":"Marilara Coppola","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Marilara Coppola","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/#article","isPartOf":{"@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/"},"author":{"name":"Marilara Coppola","@id":"https:\/\/www.rplt.it\/#\/schema\/person\/b464a6e4b11984dac23893dd19d55510"},"headline":"Update | Moral damage and data breach: the recent judgement of the European Court of Justice","datePublished":"2024-04-22T09:15:33+00:00","dateModified":"2024-05-13T14:28:28+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/"},"wordCount":296,"commentCount":0,"publisher":{"@id":"https:\/\/www.rplt.it\/#organization"},"image":{"@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rplt.it\/wp-content\/uploads\/2024\/04\/data-breach-regulation.jpg","articleSection":["Privacy &amp; Data Protection"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/","url":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/","name":"Moral damage and data breach: the Euopean Court's judgement","isPartOf":{"@id":"https:\/\/www.rplt.it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/#primaryimage"},"image":{"@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rplt.it\/wp-content\/uploads\/2024\/04\/data-breach-regulation.jpg","datePublished":"2024-04-22T09:15:33+00:00","dateModified":"2024-05-13T14:28:28+00:00","description":"Moral damage and data breach: defined the conditions for compensating damages caused by the disclosure of personal data following a hacker attack","breadcrumb":{"@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/#primaryimage","url":"https:\/\/www.rplt.it\/wp-content\/uploads\/2024\/04\/data-breach-regulation.jpg","contentUrl":"https:\/\/www.rplt.it\/wp-content\/uploads\/2024\/04\/data-breach-regulation.jpg","width":1280,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/www.rplt.it\/en\/moral-damage-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rplt.it\/"},{"@type":"ListItem","position":2,"name":"Update | Moral damage and data breach: the recent judgement of the European Court of Justice"}]},{"@type":"WebSite","@id":"https:\/\/www.rplt.it\/#website","url":"https:\/\/www.rplt.it\/","name":"Rplt Rp Legalitax","description":"","publisher":{"@id":"https:\/\/www.rplt.it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rplt.it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rplt.it\/#organization","name":"Rplt Rp Legalitax","url":"https:\/\/www.rplt.it\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rplt.it\/#\/schema\/logo\/image\/","url":"https:\/\/www.rplt.it\/wp-content\/uploads\/2023\/07\/RPLT-legalitax_neg-1.png","contentUrl":"https:\/\/www.rplt.it\/wp-content\/uploads\/2023\/07\/RPLT-legalitax_neg-1.png","width":799,"height":482,"caption":"Rplt Rp Legalitax"},"image":{"@id":"https:\/\/www.rplt.it\/#\/schema\/logo\/image\/"}},[{"@type":["Person"],"@id":"https:\/\/www.rplt.it\/#\/schema\/person\/b464a6e4b11984dac23893dd19d55510","name":"Marilara Coppola","image":{"@type":"ImageObject","@id":"","inLanguage":"en_US","url":"https:\/\/secure.gravatar.com\/avatar\/fddb3a16160062ed153441be3b0fc6bb297bcaba7b2fdf0a5d45d57486c7392a?s=96&d=mm&r=g","caption":"Marilara Coppola"}},{"@type":["Person"],"@id":"https:\/\/www.rplt.it\/#\/schema\/person\/b464a6e4b11984dac23893dd19d55510","name":"Ludovica Ceretto","image":{"@type":"ImageObject","@id":"","inLanguage":"en_US","url":"https:\/\/secure.gravatar.com\/avatar\/78acde8bafe6412b142864c689f4d8f9bc28311553ba89743e22419c72e65e17?s=96&d=mm&r=g","caption":"Ludovica Ceretto"}}]]}},"_links":{"self":[{"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/posts\/50325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/users\/554"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/comments?post=50325"}],"version-history":[{"count":3,"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/posts\/50325\/revisions"}],"predecessor-version":[{"id":50329,"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/posts\/50325\/revisions\/50329"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/media\/50221"}],"wp:attachment":[{"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/media?parent=50325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/categories?post=50325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rplt.it\/en\/wp-json\/wp\/v2\/tags?post=50325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}