The right to protection of personal data is not an absolute right

Date :

The Social Chamber of the Court of Cassation issued a judgment on March 8, 2023 (Social Chamber No. 21-12.492) recalling, in reference to point (4) of the introduction to the GDPR, that " the right to the protection of personal data is not an absolute right and must be considered in relation to its function in society and balanced against other fundamental rights, in accordance with the principle of proportionality ."

In this case, the production of other employees' pay slips was essential for an employee to justify her claims. According to the High Court: " the right to proof may justify the production of evidence that infringes on personal life provided that such production is essential to the exercise of this right and that the infringement is proportionate to the aim pursued . "

This reminder seems very timely to us, because some specialists on the subject seem to forget the proportionality criterion included in the GDPR and make this text an absolute and intangible compliance tool, in defiance of simple common sense and by applying the provisions of the text (widely developed by the supervisory authorities) to the point of absurdity in their relations with their partners.

But it is true that common sense and conformity do not always go well together...

Also read

Date :
The NIS2 directive soon to be transposed in France, the CRA regulation on cybersecurity, and the DORA regulation on the cyber resilience of the financial sector are either already in force or in the process of being in force. They organize a cybersecurity ecosystem that almost all SaaS publishers must comply with, at the cost of a fairly considerable compliance effort: complex texts to decode, notification obligations in all directions, documentation, operational implementation, etc. To begin with, we give you what you need to know about their applicability to your service
Read more
Date :
By a judgment handed down on February 14, 2024 (Social Chamber, No. 22-23.073), the Court of Cassation undermined the supposedly absolute nature of the right of individuals to be informed of the processing of personal data concerning them.
Read more
Date :
On March 13, 2024 (Commercial Chamber, 22-16.487), the Court of Cassation issued a very interesting ruling on the limits of using scanned signatures to attest to the identity and consent of their author.
Read more