CJEU - C-458/25

Summary

The CJEU Advocate General opined that Article 83(7) of the GDPR does not preclude exempting private-law entities providing publicly subsidized education from administrative fines solely because they perform a public-interest task. The opinion clarifies that "public authorities and bodies" are autonomous EU law concepts, and national legislation cannot unilaterally define which entities fall under this exemption. The case involves a dispute over a fine imposed on an educational organization for GDPR violations.

Entities