Recording is not “receiving”. The GDPR misconception that can quietly break the compliance strategy
When are personal data collected directly from the data subject, and when are they obtained indirectly? This distinction is not semantic. It determines which transparency regime applies under the GDPR and therefore whether a processing operation is lawful from the outset. In a landmark ruling of 18 December 2025 (CJEU, Case C‑422/24), the Court of […]