{"id":9627,"date":"2024-02-07T13:22:05","date_gmt":"2024-02-07T13:22:05","guid":{"rendered":"https:\/\/www.graulaw.eu\/?p=9627"},"modified":"2024-02-07T13:39:26","modified_gmt":"2024-02-07T13:39:26","slug":"cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies","status":"publish","type":"post","link":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/","title":{"rendered":"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"9627\" class=\"elementor elementor-9627 elementor-9602\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3b06376 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3b06376\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e76f95b\" data-id=\"e76f95b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2557aff elementor-blockquote--skin-border elementor-blockquote--button-color-official elementor-widget elementor-widget-blockquote\" data-id=\"2557aff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"blockquote.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<blockquote class=\"elementor-blockquote\">\n\t\t\t<p class=\"elementor-blockquote__content\">\n\t\t\t\tThe European Court of Justice has ruled in cases of cybercrime when and under what conditions a company owes compensation for the unauthorized disclosure of personal data caused by cyber attack.\t\t\t<\/p>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-51eb1a2 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"51eb1a2\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-437242e\" data-id=\"437242e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-53abaa8 elementor-widget elementor-widget-text-editor\" data-id=\"53abaa8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2><strong>The basis of the decision<\/strong><\/h2><p>On 5 July 2019, it was reported that there was an unauthorized access to the information system of the Bulgarian National Agency for Revenue &#8220;NAP&#8221;. Subsequently, the personal data contained in this system was published on the internet by the hackers. More than six million people were affected. Hundreds of them sued the NAP for compensation for the non-material damage that allegedly resulted from the disclosure of the data. It was unclear whether and under what conditions those affected were entitled to compensation in such cases and was therefore referred to the European Court of Justice for a preliminary ruling.<\/p><p>It was asked whether the finding of a personal data breach would allow the conclusion that the measures taken by the data controller were not &#8220;appropriate&#8221; and and which rules of proof apply for controllers with regard to the suitability of the protective measures applied.<\/p><p>In addition, it was asked whether the sole fear of a person that their personal data could be misused in the future could constitute&#8221;damage&#8221; within the meaning of art. 82 sec. 1 GDPR.<\/p><h2><strong>Suitability of the measures and burden of proof<\/strong><\/h2><p>The European Court of Justice rejects a general assumption that the security measures were unsuitable or inadequate if unauthorized access (e.g. a cyberattack) was successful. This means that courts must make an individual assessment of the controller&#8217;s security measures.<\/p><p>Due to the principle of accountability formulated in the GDPR, the controller of personal data bears the burden of proof that the security measures it took were suitable to ensure adequate data protection. Consequently, the controller can only exempt itself from liability by proving that it is not responsible for the damage in any way.<\/p><h2><strong>When does a liability for damages arise?<\/strong><\/h2><p>In general, damage can be caused by the data subject&#8217;s fear that the data could be misused. There is no trivial threshold for the claim under art. 82 sec. 1 GDPR. With reference to another European Court of Justice ruling (&#8220;\u00d6sterreichische Post&#8221;, C- 300\/21), it is again pointed out that data subjects must prove the existence of the aforementioned damage within the meaning of art. 82 GDPR.<\/p><h2><strong>Implications for companies and the law practice<\/strong><\/h2><p>The rulings may lead to stricter assessment of data protection violations and an increased number of lawsuits for non-material damages. Fines and warnings from consumer protection associations may also be imposed. Therefore, this should be an opportunity for companies to implement and review adequate security measures. Above all, an appropriate level of protection of personal data should always be guaranteed and, if necessary, it should also be proven that the company is not responsible for the breach in any way.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9ac643b elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9ac643b\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8af4432\" data-id=\"8af4432\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-92aebd2 elementor-widget elementor-widget-spacer\" data-id=\"92aebd2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cef9ce7 elementor-widget elementor-widget-text-editor\" data-id=\"cef9ce7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><a href=\"https:\/\/www.graulaw.eu\/en\">Grau Rechtsanw\u00e4lte PartGmbB<\/a> advises audits and supports companies, also as an <a href=\"https:\/\/www.graulaw.eu\/en\/data-protection-officer\/\">external data protection officer<\/a>, in <a href=\"https:\/\/www.graulaw.eu\/en\/data-protection\/\">the area of data protection<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2e378f1 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2e378f1\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-dc48086\" data-id=\"dc48086\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4f43554 elementor-widget elementor-widget-text-editor\" data-id=\"4f43554\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>If you have any further questions, please contact our law firm on +49 (0) 40 180 364 020 or <a href=\"mailto:office@graulaw.eu\">office@graulaw.eu<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-651ec2f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"651ec2f\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9e021f0\" data-id=\"9e021f0\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1c37a5a elementor-share-buttons--view-icon elementor-share-buttons--align-right elementor-share-buttons--color-custom elementor-share-buttons--skin-gradient elementor-share-buttons--shape-square elementor-grid-0 elementor-widget elementor-widget-share-buttons\" data-id=\"1c37a5a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"share-buttons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-grid\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_facebook\" tabindex=\"0\" aria-label=\"Share on facebook\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-facebook\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_linkedin\" tabindex=\"0\" aria-label=\"Share on linkedin\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-linkedin\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>The European Court of Justice has ruled in cases of cybercrime when and under what conditions a company owes compensation for the unauthorized disclosure of personal data caused by cyber attack. The basis of the decision On 5 July 2019, it was reported that there was an unauthorized access to the information system of the [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":9638,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[49,79,64,47],"tags":[261,263,354,421,427,451,452,453,454,455,456,457,458,459,460],"class_list":["post-9627","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-content","category-publications","category-e-commerce-en","category-data-protection","tag-graulaw-blog-en","tag-adwokat-w-niemczech-en","tag-lawyer-in-germany","tag-data-protection","tag-rodo-en","tag-cybercrime","tag-personal-data-leakage","tag-controller-liability","tag-cjeu-judgment","tag-european-court-of-justice","tag-cjeu-ruling","tag-personal-data-controller","tag-compensation-for-personal-data-leakage","tag-external-data-protector-officer","tag-graulaw-e-commerce-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies? | Grau Rechtsanw\u00e4lte PartGmbB<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies? | Grau Rechtsanw\u00e4lte PartGmbB\" \/>\n<meta property=\"og:description\" content=\"The European Court of Justice has ruled in cases of cybercrime when and under what conditions a company owes compensation for the unauthorized disclosure of personal data caused by cyber attack. The basis of the decision On 5 July 2019, it was reported that there was an unauthorized access to the information system of the [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/\" \/>\n<meta property=\"og:site_name\" content=\"Grau Rechtsanw\u00e4lte PartGmbB\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ecommercegermany\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-07T13:22:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-07T13:39:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.graulaw.eu\/wp-content\/uploads\/2024\/02\/iStock-1298091858.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2127\" \/>\n\t<meta property=\"og:image:height\" content=\"1409\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Marzena Helmecka\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marzena Helmecka\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/\"},\"author\":{\"name\":\"Marzena Helmecka\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#\\\/schema\\\/person\\\/dacc9eca6bc602109e4c03fc6783ea69\"},\"headline\":\"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies?\",\"datePublished\":\"2024-02-07T13:22:05+00:00\",\"dateModified\":\"2024-02-07T13:39:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/\"},\"wordCount\":529,\"publisher\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.graulaw.eu\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/iStock-1298091858.jpg\",\"keywords\":[\"graulaw blog\",\"adwokat w niemczech\",\"lawyer in Germany\",\"Data protection\",\"rodo\",\"Cybercrime\",\"personal data leakage\",\"controller liability\",\"CJEU judgment\",\"European Court of Justice\",\"CJEU ruling\",\"personal data controller\",\"compensation for personal data leakage\",\"external data protector officer\",\"graulaw e-commerce\"],\"articleSection\":[\"Content\",\"Publications\",\"E-Commerce\",\"Data Protection\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/\",\"url\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/\",\"name\":\"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies? | Grau Rechtsanw\u00e4lte PartGmbB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.graulaw.eu\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/iStock-1298091858.jpg\",\"datePublished\":\"2024-02-07T13:22:05+00:00\",\"dateModified\":\"2024-02-07T13:39:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.graulaw.eu\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/iStock-1298091858.jpg\",\"contentUrl\":\"https:\\\/\\\/www.graulaw.eu\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/iStock-1298091858.jpg\",\"width\":2127,\"height\":1409,\"caption\":\"Anonymous computer hacker in white mask and hoodie standing in the middle and hacking it with his computer, Data theft, internet attack, Padlock Hologram icons over the computer\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/\",\"name\":\"Grau Rechtsanw\u00e4lte PartGmbB\",\"description\":\"GRAU Rechtsanw\u00e4lte PartGmbB ist eine international ausgerichtete Rechtsanwaltskanzlei mit wirtschaftsrechtlicher Ausrichtung und Sitz in Hamburg.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#organization\",\"name\":\"Grau Rechtsanw\u00e4lte PartGmbB\",\"url\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.graulaw.eu\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/logo.svg\",\"contentUrl\":\"https:\\\/\\\/www.graulaw.eu\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/logo.svg\",\"width\":150,\"height\":48,\"caption\":\"Grau Rechtsanw\u00e4lte PartGmbB\"},\"image\":{\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/ecommercegermany\",\"https:\\\/\\\/www.facebook.com\\\/graulawtransport\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/graulaw\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/#\\\/schema\\\/person\\\/dacc9eca6bc602109e4c03fc6783ea69\",\"name\":\"Marzena Helmecka\",\"url\":\"https:\\\/\\\/www.graulaw.eu\\\/en\\\/author\\\/marzena-helmecka\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies? | Grau Rechtsanw\u00e4lte PartGmbB","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/","og_locale":"en_US","og_type":"article","og_title":"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies? | Grau Rechtsanw\u00e4lte PartGmbB","og_description":"The European Court of Justice has ruled in cases of cybercrime when and under what conditions a company owes compensation for the unauthorized disclosure of personal data caused by cyber attack. The basis of the decision On 5 July 2019, it was reported that there was an unauthorized access to the information system of the [&hellip;]","og_url":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/","og_site_name":"Grau Rechtsanw\u00e4lte PartGmbB","article_publisher":"https:\/\/www.facebook.com\/ecommercegermany","article_published_time":"2024-02-07T13:22:05+00:00","article_modified_time":"2024-02-07T13:39:26+00:00","og_image":[{"width":2127,"height":1409,"url":"https:\/\/www.graulaw.eu\/wp-content\/uploads\/2024\/02\/iStock-1298091858.jpg","type":"image\/jpeg"}],"author":"Marzena Helmecka","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Marzena Helmecka","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/#article","isPartOf":{"@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/"},"author":{"name":"Marzena Helmecka","@id":"https:\/\/www.graulaw.eu\/en\/#\/schema\/person\/dacc9eca6bc602109e4c03fc6783ea69"},"headline":"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies?","datePublished":"2024-02-07T13:22:05+00:00","dateModified":"2024-02-07T13:39:26+00:00","mainEntityOfPage":{"@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/"},"wordCount":529,"publisher":{"@id":"https:\/\/www.graulaw.eu\/en\/#organization"},"image":{"@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.graulaw.eu\/wp-content\/uploads\/2024\/02\/iStock-1298091858.jpg","keywords":["graulaw blog","adwokat w niemczech","lawyer in Germany","Data protection","rodo","Cybercrime","personal data leakage","controller liability","CJEU judgment","European Court of Justice","CJEU ruling","personal data controller","compensation for personal data leakage","external data protector officer","graulaw e-commerce"],"articleSection":["Content","Publications","E-Commerce","Data Protection"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/","url":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/","name":"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies? | Grau Rechtsanw\u00e4lte PartGmbB","isPartOf":{"@id":"https:\/\/www.graulaw.eu\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/#primaryimage"},"image":{"@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.graulaw.eu\/wp-content\/uploads\/2024\/02\/iStock-1298091858.jpg","datePublished":"2024-02-07T13:22:05+00:00","dateModified":"2024-02-07T13:39:26+00:00","breadcrumb":{"@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/#primaryimage","url":"https:\/\/www.graulaw.eu\/wp-content\/uploads\/2024\/02\/iStock-1298091858.jpg","contentUrl":"https:\/\/www.graulaw.eu\/wp-content\/uploads\/2024\/02\/iStock-1298091858.jpg","width":2127,"height":1409,"caption":"Anonymous computer hacker in white mask and hoodie standing in the middle and hacking it with his computer, Data theft, internet attack, Padlock Hologram icons over the computer"},{"@type":"BreadcrumbList","@id":"https:\/\/www.graulaw.eu\/en\/cybercrime-and-the-exposure-of-personal-data-what-does-the-reinforcement-of-consumer-rights-mean-for-companies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.graulaw.eu\/en\/"},{"@type":"ListItem","position":2,"name":"Cybercrime and the exposure of personal data. What does the reinforcement of consumer rights mean for companies?"}]},{"@type":"WebSite","@id":"https:\/\/www.graulaw.eu\/en\/#website","url":"https:\/\/www.graulaw.eu\/en\/","name":"Grau Rechtsanw\u00e4lte PartGmbB","description":"GRAU Rechtsanw\u00e4lte PartGmbB ist eine international ausgerichtete Rechtsanwaltskanzlei mit wirtschaftsrechtlicher Ausrichtung und Sitz in Hamburg.","publisher":{"@id":"https:\/\/www.graulaw.eu\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.graulaw.eu\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.graulaw.eu\/en\/#organization","name":"Grau Rechtsanw\u00e4lte PartGmbB","url":"https:\/\/www.graulaw.eu\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.graulaw.eu\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.graulaw.eu\/wp-content\/uploads\/2022\/04\/logo.svg","contentUrl":"https:\/\/www.graulaw.eu\/wp-content\/uploads\/2022\/04\/logo.svg","width":150,"height":48,"caption":"Grau Rechtsanw\u00e4lte PartGmbB"},"image":{"@id":"https:\/\/www.graulaw.eu\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ecommercegermany","https:\/\/www.facebook.com\/graulawtransport","https:\/\/www.linkedin.com\/company\/graulaw\/"]},{"@type":"Person","@id":"https:\/\/www.graulaw.eu\/en\/#\/schema\/person\/dacc9eca6bc602109e4c03fc6783ea69","name":"Marzena Helmecka","url":"https:\/\/www.graulaw.eu\/en\/author\/marzena-helmecka\/"}]}},"_links":{"self":[{"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/posts\/9627","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/comments?post=9627"}],"version-history":[{"count":9,"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/posts\/9627\/revisions"}],"predecessor-version":[{"id":9636,"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/posts\/9627\/revisions\/9636"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/media\/9638"}],"wp:attachment":[{"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/media?parent=9627"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/categories?post=9627"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.graulaw.eu\/en\/wp-json\/wp\/v2\/tags?post=9627"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}