GDPR Meets Unfair Competition Law: The Lindenapotheke Ruling and Its Implications for Data Subjects and Controllers

On 4 October 2024, the Grand Chamber of the European Court of Justice (ECJ) issued a landmark judgment that adds significant depth to the interpretation of the GDPR, especially concerning its interplay with unfair competition law and the concept of “special categories of personal data”. After analysing the facts of the case and the ECJ’s reasoning, this Insight aims to highlight how the Lindenapotheke ruling, while aligned with the ECJ’s longstanding commitment to securing data subjects’ rights, represents a note-worthy advance: it reinforces the high level of protection afforded to data subjects by integrating GDPR safeguards – particularly those under Article 9 GDPR – with those es-tablished in other areas of EU secondary law. Finally, this Insight examines the critical aspects and practical implications of the ruling, especially for data controllers, as the ECJ’s approach may have a deterrent effect on practices that risk infringing these enhanced data protection standards.