CJEU opinion: consumer protection claims can be based on personal data protection infringement

The Advocate General Richard de la Tour issued their opinion in Case C-319/20 Facebook Ireland according to which the EU member states ‘may allow consumer protection associations to bring representative actions against infringements of the protection of personal data,’ on the condition that these actions must be based on infringements of rights which the data subjects derive directly from the General Data Protection Regulation.