The CJEU Ruled that Supervisory Authorities Can Order the Deletion of Unlawfully Processed Personal Data

Covington & Burling – On March 14, 2024, the Court of Justice of the EU ruled that EU supervisory authorities have the (corrective) power to order data controllers who have been found to process personal data unlawfully to erase such personal data, even if the data subjects have not requested the erasure.