TR v Land Hessen – DPA not obliged to fine under the GDPR By Shan Nanayakkara on December 3, 2024 By Shan Nanayakkara In TR v Land Hessen (C‑768/21) the European Court of Justice (“ECJ”) found that following a personal data breach, a supervisory authority is under no obligation to exercise its corrective powers, specifically the power to…