ECJ strengthens data protection in online drug trade
The European Court of Justice (ECJ) ruled in case C-21/23 (Lindenapotheke) that Member States can allow competitors of a company to judicially challenge violations of the General Data Protection Regulation (GDPR) as unfair commercial practices. The ruling concerns the online sale of prescription-only medicines, where explicit consent from customers for the processing of their personal data is required – even for over-the-counter medicines. In its decision, the ECJ clarifies that the GDPR allows competitors to take action against suspected data protection violations. This strengthens the rights of affected individuals and ensures greater data protection. Furthermore, it can help to prevent further violations of the GDPR.

