CJEU ruling expands GDPR liability regarding unfair competition and AML/CFT

Article published on January 16, 2025, in Compliance Week -here.

European and French case law confirms that a breach of the GDPR—as well as other compliance obligations—can constitute an act of unfair competition, allowing competitors to take legal action on that basis. This trend is likely to extend to other costly obligations such as the duty of care, the AI Act, or the CSRD. Every company must therefore implement an ambitious compliance program to protect itself not only from regulatory penalties but also from legal actions by its competitors.