The right to protection of personal data is not an absolute right

Date :

The Social Chamber of the Court of Cassation issued a judgment on March 8, 2023 (Social Chamber No. 21-12.492) recalling, in reference to point (4) of the introduction to the GDPR, that " the right to the protection of personal data is not an absolute right and must be considered in relation to its function in society and balanced against other fundamental rights, in accordance with the principle of proportionality ."

In this case, the production of other employees' pay slips was essential for an employee to justify her claims. According to the High Court: " the right to proof may justify the production of evidence that infringes on personal life provided that such production is essential to the exercise of this right and that the infringement is proportionate to the aim pursued . "

This reminder seems very timely to us, because some specialists on the subject seem to forget the proportionality criterion included in the GDPR and make this text an absolute and intangible compliance tool, in defiance of simple common sense and by applying the provisions of the text (widely developed by the supervisory authorities) to the point of absurdity in their relations with their partners.

But it is true that common sense and conformity do not always go well together...

Also read

Date :
Digital accessibility is an obligation for all e_commerce sites for new services from June 28, 2025. Existing "similar" services have an additional 5 years to comply with these obligations. But what is a "similar" service really?
Read more
Date :
On March 13, 2024 (Commercial Chamber, 22-16.487), the Court of Cassation issued a very interesting ruling on the limits of using scanned signatures to attest to the identity and consent of their author.
Read more
Date :
The Data Act has been applicable since September 12, 2025, and it does not only apply to connected data from the IoT. It also targets all European added service providers in SaaS mode, for example in the field of EDM, accounting, invoicing, archiving, etc. which will now have to allow their customers to terminate for convenience at any time and a reversibility whose scope is difficult to apprehend. It is not just a tool for digital sovereignty. It is also a text with dangerous side effects for national European suppliers, sometimes fragile, whose customers are offered on a platter the possibility of switching to competition, why not American...
The Data Act does not apply to ongoing contracts, which some companies, and even their lawyers, seem to be unaware of, as they see this text as a free and perfect opportunity to terminate a contract or to require the provision of information not provided for in the contract. They must moderate themselves, because the Data Act only applies to contracts concluded after September 12, 2025, which must now include clauses that make it possible to best adjust the provisions of the text.
Read more