The ECJ clarifies: the GDPR does not grant an independent right to interim injunctions; even minor psychological impairment qualifies as non-material damage; the controller’s degree of fault is irrelevant to damages assessment.
The CJEU ruled that GDPR fines are based on the total turnover of the economic entity (group), not on the individual company’s turnover, which applies to the maximum penalty; the actual fine-setting remains the task of supervisory authorities.