d) criminal offences and public security

2 pending referrals

Referral C-416/25 (Freie und Hansestadt Hamburg, 25 Jun 2025)

Referral C-222/25 (Rahapesu Andmebüroo, 21 Mar 2025)

1 preliminary ruling

Judgment of 16 Jul 2020, C-311/18 (Facebook Ireland and Schrems)

Article 2(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), must be interpreted as meaning that that regulation applies to the transfer of personal data for commercial purposes by an economic operator established in a Member State to another economic operator established in a third country, irrespective of whether, at the time of that transfer or thereafter, that data is liable to be processed by the authorities of the third country in question for the purposes of public security, defence and State security.

---

Disclaimer