The article aims at analyzing the data protection case law collected within the COVID-19 Litigation projectuntil November 2021. In particular, the survey focuses on litigation concerning cases where the processing of personal data is directly aimed at addressing the ongoing pandemic. The article firstly provides a very brief overview of the cases, focusing on the purposes of processing (Section 2). Then, the decisions are described in relation to the legal issues they address: the grounds for the processing of public interest and consent (Section 3), the different aspects of personal data processing that have been considered by the Court (Section 4), data transfers outside external borders (Section 5), andthe remedies that courts have granted in individual cases, building a classification of those remedies (Section 6). In the course of the analysis, as well as in Section 7, case law trends are critically considered, also looking at future litigationand possible lines of research to be further developed.