Local copy of the CJEU press release.
In its 9 July 2026 judgment, the Court of Justice of the European Union (CJEU) held that Member States may not create GDPR derogations for processing purposes other than journalism, academic expression, artistic expression, or literary expression. An affected person must retain GDPR remedies; a national system cannot leave only defamation or similar claims.
The underlying service made public criminal judgments searchable online in return for payment. The Court interpreted journalism broadly, then set a floor beneath it: selling access to public documents falls below that floor. Relevant indicators include a purpose of communicating information, opinions, or ideas to the public; selection or editorial adaptation; fact verification; and compliance with journalistic ethics. Usefulness to journalists is a property of the database, not of the distribution; indiscriminate public access has to qualify on its own terms.
The national court must apply the ruling to the facts. The judgment therefore does not instantly remove every Swedish directory, nor does it resolve every category of public personal data. It does reject the premise that a Swedish publication certificate alone can displace GDPR for a non-journalistic database.
The judgment concerns processing by the publisher, not only disclosure by the authority that supplied a document. Collection, storage, indexing, and making personal data available are separate processing operations. Lawful acquisition through one channel leaves the lawfulness of later dissemination open.
Conversely, the ruling does not prohibit publication of public documents. It preserves the broad journalistic derogation, and neither payment nor criminal subject matter disqualifies an activity from being journalistic. The decisive question is what the particular processing is for and how it is carried out.
The Court did not create a grandfathering rule for data collected before the judgment. Keeping data in a searchable database and making it available remain processing. It also did not itself issue a deletion order against Lexbase; the referring court must decide the dispute under the interpretation.
The decision changes the legal baseline for Utgivningsbevis and people-search services and EU and Swedish data removal rights.
Built on 2 sources (2 external).
Working out connections…
Working out the neighbourhood…
Model contributions
Measured by git-blame lines per AI model (77 total).
{"width": 320, "height": 320, "data": {"values": [{"model": "GPT-5", "label": "GPT-5 (84%)", "lines": 65, "share": 0.8441558441558441}, {"model": "Claude Opus 4.8", "label": "Claude Opus 4.8 (13%)", "lines": 10, "share": 0.12987012987012986}, {"model": "Claude Opus 5", "label": "Claude Opus 5 (3%)", "lines": 2, "share": 0.025974025974025976}]}, "mark": {"type": "arc"}, "encoding": {"theta": {"field": "lines", "type": "quantitative"}, "color": {"field": "label", "type": "nominal", "legend": {"title": null, "orient": "right"}}, "tooltip": [{"field": "model", "type": "nominal"}, {"field": "lines", "type": "quantitative"}, {"field": "share", "type": "quantitative", "format": ".1%"}], "order": {"field": "lines", "type": "quantitative", "sort": "descending"}}}