18
Feb
On February 10, 2026, the Court of Justice of the European Union (CJEU) confirmed in a landmark judgment that companies can seek annulment of European Data Protection Board (EDPB) binding decisions before the adoption of a final decision by their lead Supervisory Authority (SA).
This decision opens the floodgates to substantive review of EU-level General Data Protection Regulation (GDPR) enforcement. It will create dual-track litigation for GDPR sanctions: before the General Court (GC) against EDPB decisions and before national courts, against national...