57All processing of personal data must comply, first, with the principles relating to data quality set out in in Article 6 of Directive 95/46 or in Article 5 of Regulation 2016/679 and, second, with one of the criteria governing the legitimacy of data processing listed in Article 7 of that directive or in Article 6 of that regulation (see, to that effect, judgments of 20 May 2003, Österreichischer Rundfunk and Others, C‑465/00, C‑138/01 and C‑139/01, EU:C:2003:294, paragraph 65, and of 13 May 2014, Google Spain and Google, C‑131/12, EU:C:2014:317, paragraph 71).
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.