Case C-340/21, Natsionalna agentsia za prihodite: Judgment of the Court (Third Chamber) of 14 December 2023 (request for a preliminary ruling from the Varhoven administrativen sad — Bulgaria) — VB v Natsionalna agentsia za prihodite (Reference for a preliminary ruling — Protection of natural persons with regard to the processing of personal data — Regulation (EU) 2016/679 — Article 5 — Principles relating to that processing — Article 24 — Accountability of the controller — Article 32 — Measures implemented to ensure security of processing — Assessment of the appropriateness of such measures — Scope of judicial review — Taking of evidence — Article 82 — Right to compensation and liability — Possible exemption from liability of the controller in the event of infringement by third parties — Claim for compensation for non-material damage based on fear of potential misuse of personal data)