导航
GDPR > Recital 146
下载PDF

Recital 146

Recital 146

(146) 控管者或處理者應賠償當事人因其違反本規則之資料處理所 受之一切可能損害。若控管者或處理者能證明其從任何方面而言皆非 造成損害之原因,則應免除其責任。損害之概念應依照歐盟法院之判例,以能完全反映本規則所欲達成之目標作較寬鬆之解釋。惟此不應 損及就違反歐盟法或會員國法所定其他規則所生損害為任何主張之 權利。違反本規則之資料處理,亦包括資料處理違反依據本規則所制 定之授權法及施行法以及違反為具體化本規則之會員國法者。資料主 體就其等所受損害,應受到充分且有實益之賠償。當控管者或處理者 亦參與同一資料處理時,應追究各控管者或處理者就整個損害之法律 責任。然而,當其等參與同一司法程序時,依據會員國法,在確保受 到損害之資料主體能受到充分且有實益之賠償的前提下,可能依據各 控管者或處理者就該資料處理造成損害結果之歸責程度進行損害賠 償責任之分擔。任何負擔全部損害賠償責任之控管者或處理者,得續 而展開對其他亦參與同一處理程序之控管者或處理者之追償程序。

(146) The controller or processor should compensate any damage which a person may suffer as a result of processing that infringes this Regulation.

The controller or processor should be exempt from liability if it proves that it is not in any way responsible for the damage.

The concept of damage should be broadly interpreted in the light of the case-law of the Court of Justice in a manner which fully reflects the objectives of this Regulation.

This is without prejudice to any claims for damage deriving from the violation of other rules in Union or Member State law.

Processing that infringes this Regulation also includes processing that infringes delegated and implementing acts adopted in accordance with this Regulation and Member State law specifying rules of this Regulation.

Data subjects should receive full and effective compensation for the damage they have suffered.

Where controllers or processors are involved in the same processing, each controller or processor should be held liable for the entire damage.

However, where they are joined to the same judicial proceedings, in accordance with Member State law, compensation may be apportioned according to the responsibility of each controller or processor for the damage caused by the processing, provided that full and effective compensation of the data subject who suffered the damage is ensured.

Any controller or processor which has paid full compensation may subsequently institute recourse proceedings against other controllers or processors involved in the same processing.