CJEU blocks Sweden's GDPR exemption, reviving SEK 300,000 damages claim

The Court of Justice of the European Union ruled that member states cannot use constitutional exemptions to remove GDPR protections, blocking Sweden's ability to shield a criminal convictions database from data protection remedies. The judgment revives a SEK 300,000 damages claim and establishes that selling access to public documents does not qualify as journalistic processing unless it meets strict editorial and verification standards.

This Wire brief sits within Fusion42's coverage of Cybersecurity.