GDPR in Practice: Lessons from the Courts – July 2025

f you fully delete a data subject’s personal data and their deletion/objection request, you risk accidentally collecting or processing their data again in the future — which is exactly what happened in a real-world case where a company re-collected personal data after deletion, thinking they were compliant. The result? The Data Protection Authority ruled against them for unlawful processing.









