62By contrast, such a collection of IP addresses, authorised, as can be seen from the documents before the Court, within certain quantitative limits and under certain conditions, by the Commission nationale de l’informatique et des libertés (CNIL) (National Commission for Information Technology and Civil Liberties (CNIL), France), with a view to their transmission to Hadopi for the purposes of their potential use in subsequent administrative or judicial proceedings intended to combat activities which infringe copyright and related rights, does constitute ‘processing’, within the meaning of Article 4(2) of the GDPR, the lawfulness of which depends on the conditions laid down in point (f) of the first subparagraph of Article 6(1) of that regulation, in the light of the Court’s case-law set out, inter alia, in the judgments of 17 June 2021, M.I.C.M. (C‑597/19, EU:C:2021:492, paragraphs 102 and 103), and of 4 July 2023, Meta Platforms and Others (General terms of use of a social network) (C‑252/21, EU:C:2023:537, paragraphs 106 to 112 and the case-law cited).
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.