GDPR — Article 82

The article's text

Article 82
Right to compensation and liability
1. Any person who has suffered material or non-material damage as a result of an infringement of this Regulation shall have the right to receive compensation from the controller or processor for the damage suffered.
2. Any controller involved in processing shall be liable for the damage caused by processing which infringes this Regulation. A processor shall be liable for the damage caused by processing only where it has not complied with obligations of this Regulation specifically directed to processors or where it has acted outside or contrary to lawful instructions of the controller.
3. A controller or processor shall be exempt from liability under paragraph 2 if it proves that it is not in any way responsible for the event giving rise to the damage.
liability under paragraph 2 if it proves that it is not in any way responsible for the event giving rise to the damage.
4. Where more than one controller or processor, or both a controller and a processor, are involved in the same processing and where they are, under paragraphs 2 and 3, responsible for any damage caused by processing, each controller or processor shall be held liable forfull text the entire damage in order to ensure effective compensation of the data subject.
5. Where a controller or processor has, in accordance with paragraph 4, paid full compensation for the damage suffered, that controller or processor shall be entitled to claim back from the other controllers or processors involved in the same processing that part of the compensation corresponding to their part of responsibility for the damage, in accordance with the conditions set out in paragraph 2.
corresponding to their part of responsibility for the damage, in accordance with the conditions set out in paragraph 2.
6. Court proceedings for exercising the right to receive compensation shall be brought before the courts competent under the law of the Member State referred to in Article 79(2).

Who wrote about this article in the consultations

Filers who named this exact article number in their own text. It is their sentence, not our reading — and not a causal claim.

NGO

company

other

EU citizen

ACADEMIC_RESEARCH_INSTITTUTION

Who	Country	What they wrote
ANITEC-ASSINFORM	IT	and disregards that privacy and data protection are not absolute rights but must be weighed against other fundamental rights. 5. Article 82 GDPR – the right to compensation for non‐material damage: Before the introduction of the GDPR many commentators ↗
Bitkom e.V.	DE	is recognizes the importance of practical influence in determining the responsibilities of joint controllers. Additionally, under Article 82 Subsection 3 GDPR, the issue of liability when processors engage further sub-processors is crucial. 15 Limiting the con ↗
MyData-TRUST	BE	lting from a GDPR infringement can claim compensation against parties "involved" in the relevant processing under the palindromic Art.82. The Art.28 SCCs don't impose any such third-party rights either, save only if the processor has factually disappeared. Whi ↗
Gesellschaft für Datenschutz und Datensicherheit (GDD) e.V.	DE	nbarung in transparenter Form“ (Art. 26 Abs. 1 S. 2 DS-GVO) sowie die grundsätzlich gesamtschuldnerische Haftung nach Maßgabe des Art. 82 DS-GVO, weil dort von „jedem an einer Verarbeitung beteiligten Verantwortlichen“ und „mehr als ein Verantwortlicher“ die R ↗
Deutsche Industrie- und Handelskammer (DIHK) / German Chamber of Commerce and Industry	DE	ersuchen von unzufriedenen Kunden gestellt Sonstiges (Freitext) 5. Liegen Ihrer Ansicht nach die Probleme beim Schadenersatz nach Art. 82 DSGVO (z.B. im Zusammenhang mit Abmah- nungen, Datenpannen etc.) vor? (Einfachauswahl) Ja Nein Keine Aussage möglich Falls ↗
Advocaat, Nederland	NL	ers dan de Nederlandse, is de strekking van de zin duidelijk: lidstaten mogen niet toestaan dat het recht op schadevergoeding van artikel 82 lid 1 AVG door een belangenorganisatie wordt uitgeoefend zonder opdracht van de betrokkene. Door de plaats van het woor ↗
ZKI e.V.	DE	SGVO verzichtet werden. Verantwortliche sind bereits aus eigenem Interesse und wegen der drohenden gesamtschuldnerischen Haftung (Art. 82 Abs. 4 DSGVO) in der Praxis daran interessiert, entsprechende Vereinbarungen zur Abgrenzung der internen Verantwortlichkei ↗
—	DE	or the authority are driven more by politics than by protecting the rights of individual citizens. I recommend strengthening GDPR Article 82 to include automatic penalty payments from data controllers to data subjects for any GDPR violation proven in court: fo ↗
Julia O'Toole	FR	on and encryption, so organisations can genuinely comply with their legal obligations to control their data. Our feedback on GDPR Article 82. 1 and 2: If an organisation has no control over its access, it has no control over its data. Therefore, a person who h ↗
Access Now Europe	FR	n facts and/or circumstances relevant for the decision. Spain Common Administrative Procedure of the Public Administration (2015) Article 82. Interested parties may allege and submit justifications within a time limit, except if other arguments / evidence are ↗

Source: public consultation submissions and position papers. n = 10 mentions; counted as a literal reference to the article number.

Ask about this article →