- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By 
Ruth Prickett2025-01-16T15:53:00
Legal cases and fines for breaches of the EU’s General Data Protection Regulation could rise sharply after a recent case in the Court of Justice of the European Union (CJEU) found that a GDPR breach was a source of unfair competition. The judgment also opens doors to civil cases relating to other compliance failings, if a company is seen by competitors to be ignoring expensive or challenging rules, such as those regarding anti-money laundering and countering the financing of terrorism (AML/CFT).
The case concerned a German pharmacy that was selling products on Amazon. A competitor took it to court under German competition law on the grounds that if customers had not given consent for their personal data to be processed, the pharmacy was not only breaking GDPR rules, but in the process was gaining an unfair competitive advantage. The case was referred to the CJEU, which judged in October that it did not matter that the complainant’s motivation was competition, rather than data protection.
This established that GDPR cases can be brought to court under national laws for other issues, such as competition, if a business’s failure to comply gives them an unfair advantage.
These topics and more will be address at Compliance Week’s Cyber Risk and Data Privacy Summit, held at the Hotel AKA in Alexandria, Va., Feb. 10-11., which will bring together legal, compliance, and risk professionals to benchmark best practices on managing cyber risks and provide insights into the latest data privacy trends.
THIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.
News and analysis for the well-informed compliance or audit exec. Select an option and click continue.
Annual Membership $499 Value offer
Full price one year membership with auto-renewal.
Membership $599
One-year only, no auto-renewal.
New rules on cyber risk management across the EU put execs firmly in the crosshairs for noncompliance and are likely to apply to a wider range of organizations than many business leaders may initially think. However, there are also concerns that the rules may become muddled across the wide bloc. ...
Breaches of the EU’s GDPR can cost companies substantial sums and huge reputational damage. Now some are warning that the implementation of the EU’s AI Act will be just as far-reaching, and could potentially lead to similar numbers of cases.
Companies could be in danger of failing to comply with a raft of social responsibility-minded legislation at the European Union and national level because they might mistakenly think duties on corporates overlap when they do not.
London has long had the dubious reputation of being the world’s money laundering capital and it looks like it’s a title it is likely to retain for some time yet.
The U.K. will struggle to shed its reputation as one of the world’s biggest conduits for dirty money due to a combination of patchy intelligence-sharing and poorly resourced enforcement agencies, experts told Compliance Week.
The U.K. has an ongoing problem with money laundering, but recent changes to economic crime law and corporate registration requirements could bring more cases to court, according to consultancy KPMG.
