Analysis: “The GDPR does not prevent effective administration (but requires appropriate legal bases)” by Meinhard Schröder

One of the peculiarities of data protection law is that its interpretation, to a large extent, is performed by independent national authorities and by their coordination body, the European Data Protection Board. This is often a decent basis to work on, but it should be observed that only the Court of Justice can give an authentic interpretation of European law, including European data protection law. Therefore, any judgment by the ECJ on the interpretation of the General Data Protection Regulation (GDPR) is welcome, and the case ‘SS’ SIA v. Valsts ieņēmumu dienests (=Latvian Tax Authority) is no exception. It resulted from an information request by the Latvian Tax Authority to the operator of a website featuring vehicle advertisements, w