A documentation project of Artikel 80 e.V. — every entry is backed by an official document on file. Last updated: 17.07.2026.
1. The question
May a not-for-profit body, mandated by a data subject under Article 80(1) GDPR, exercise that person’s rights under Articles 77–79 without the mandatory involvement of a lawyer? The provision has applied directly in all Member States since 25 May 2018. Whether national procedural law may nonetheless require the additional engagement of a lawyer — a chain of representation the Regulation does not mention — is answered differently across the EEA. This page documents those answers.
2. Legal framework
- Article 47(2), second sentence, of the Charter: „Everyone shall have the possibility of being advised, defended and represented.“
- Article 80(1) GDPR implements this guarantee for data protection, listing the remedies of Articles 77, 78 and 79 — including the judicial ones.
- The Regulation contains one express opening clause in Article 80(1): for the Article 82 compensation claim („where provided for by Member State law“). It contains none for representation in proceedings under Articles 77–79.
- Restrictions of Charta rights are governed by Article 52(1) of the Charter; restrictions of GDPR rights by Article 23 GDPR.
- On the standing of qualified entities, the Court of Justice has ruled in a continuous line from C-40/17 (Fashion ID, under Directive 95/46/EC) through C-319/20 (Meta Platforms Ireland) to C-757/22.
3. The official record: 30 authorities asked, 12 substantive replies
| Jurisdiction | Authority, reference, date | Position on judicial representation |
|---|---|---|
| Bulgaria | CPDP, ПНМД-02-52-3-26, 25.02.2026 | barrier-free, incl. Art. 82 damages |
| Croatia | AZOP, 10./20.02.2026 (after consulting the Ministry of Justice) | barrier-free (Art. 41 AZOP Act) |
| Malta | IDPC, 09.02.2026 | barrier-free |
| Iceland | Persónuvernd, 22.01.2026 | barrier-free |
| Denmark | Datatilsynet, 2026-212-2336, 16.04.2026 | barrier-free |
| Lithuania | VDAI, 1R-982, 19.02.2026 | national law expressly permits association representation „with or without an attorney“ (Art. 56(1)(6) CCP); the lawyer question regarded as a matter of national procedural law |
| Austria | DSB, 2026-0.018.264, 12.01.2026 | mandatory lawyer involvement considered unobjectionable |
| Estonia | AKI, 11.02.2026 | representative must be a qualified natural person; Art. 80(1) „does not cover procedural representation“ |
| Czech Republic | ÚOOÚ, UOOU-01211/26-4, 18.02.2026 | representing legal person requires attorney-level qualification |
| Hungary | NAIH-6457-2 (13.03.2026), NAIH-6457-6 (15.07.2026) | no lawyer before the authority (Art. 77); mandatory lawyer for judicial proceedings (Arts. 78, 79) — chain representation |
| Luxembourg | CNPD, ref. 15.626, 02.07.2026 | complaints to the CNPD barrier-free; appeals against CNPD decisions only through a lawyer of List I of the Bar — chain representation |
| Germany | Federal Court of Justice, I ZB 36/25, 15.09.2025 (NJW-RR 2025, 1406) and 25.02.2026 | § 78 ZPO „not modified“ by Art. 80(1) GDPR |
Latvia declined substantive analysis (16.02.2026); Sweden took note without action (11.02.2026); Finland has acknowledged receipt three times (05.02., 10.02., 13.07.2026) without substantive reply; Poland, Slovakia and Romania acknowledged receipt. The remaining jurisdictions have not responded to date.
Result: the same directly applicable provision produces materially different levels of protection, depending solely on the Member State in which processing occurs.
4. Institutional status (chronology of record)
| Date | Event | Source |
|---|---|---|
| 17.11.2025 | Reference C-523/25 published (NL; admissibility requirements for collective actions under Art. 80 GDPR) | OJ C/2025/5934 |
| 13.01.2026 | Parliamentary question E-000091/2026 on the application of Art. 80(1) in Germany and complaint CHAP(2020)3321 | EP register |
| 22.04.2026 | Commission confirms CHAP(2020)3321 remains under review | Answer to E-000091/2026 |
| 25.02.2026 | CPDP Bulgaria records that the Bulgarian government has submitted an official position in C-523/25 against additional national barriers | ПНМД-02-52-3-26 |
| 24.06./13.07.2026 | EDPB Chair declines suggestion of an Art. 64(2) opinion, referring i.a. to C-523/25 | EDPB letters |
| 15.07.2026 | EDPB Secretariat confirms treatment of our submission as an „inconsistency flag“ for the Board’s consistency discussions | EDPB e-mail |
| 17.07.2026 | Full monitoring dossier (12 official replies, 44 pp.) submitted via the EDPB inconsistency-flag procedure | Submission on file |
5. Pending proceedings (reported, not commented)
- CJEU, C-523/25 — pending; the interpretative question is before the Court.
- Federal Constitutional Court (Germany), 1 BvR 94/26 — constitutional complaints against the decisions in I ZB 36/25 are pending. The submissions are documented; the proceedings await decision.
- VG Köln, 13 K 1969/26 — action concerning the refusal to initiate an Art. 64(2) consistency procedure; pending, hearing expected Q4 2026/early 2027.
6. Open questions awaiting authoritative clarification
- Does Article 80(1) GDPR, read with Article 47(2), second sentence, of the Charter, permit national law to interpose a mandatory lawyer between the data subject’s chosen body and the court?
- If restrictions of the representation right require a basis under Article 52(1) of the Charter and Article 23 GDPR — which provision supplies that basis for the chain requirement?
- What follows from the fact that the Union legislator created an opening clause solely for Article 82 claims?
- Can an acte clair be assumed while a court of another Member State has referred the question (C-523/25) and a Member State government has taken the opposite position in that very case?
7. Documents
(Download-Liste: Dossier EN, amtliche Antworten je Land)
Artikel 80 e.V. — civil-society monitoring of the application of Union data protection law (Articles 11 CFR, 10 ECHR; Directive (EU) 2024/1069). Contact: monitoring@artikel-80.eu. We correct errors immediately upon substantiated notice — see our correction log.