Association of Accidental Americans – Court Ruling (France, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The French Supreme Administrative Court ruled that the Association of Accidental Americans could not stop the automatic transfer of tax data to the US under the FATCA Agreement. This is important because it clarifies that data transfers can be lawful even if there are concerns about data minimization. Organizations should understand the legal frameworks governing international data transfers.
What happened
The Association of Accidental Americans sought to annul a decision allowing the automatic transfer of tax data to the US.
Who was affected
Members of the Association of Accidental Americans, who are affected by the tax data transfers.
What the authority found
The court held that the data transfers were justified for legitimate purposes and complied with data protection rules.
Why this matters
This ruling reinforces the idea that international data transfers can be valid under certain agreements, highlighting the need for organizations to be aware of their legal obligations when handling personal data.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Association of Accidental Americans (“Association”) sought the annulment of the decision of 23 May 2022 by which the French DPA (“CNIL”) ordered the closure of its complaint seeking the suspension of automatic transfers of tax data operated between France and the United States pursuant to the international agreement concluded on 14 November 2013 (“FATCA Agreement”). The Association appealed the decision in front of the French Supreme Administrative Court (“Conseil d’Etat”). Firstly, Article 5 GDPR states that processing must respect data minimization and storage limitation. The Association had considered that by analyzing the US Treasury and statements by the US tax authority, the transfer of personal data to the US authorities under the FACTA Agreement did not meet the data minimization requirement since (i) little or no use would be made of this data by these authorities due to the lack of resources available and (ii) there would be a lack of reciprocity between the American and European authorities as regards to the transmission of this data. The Conseil d’Etat considered that since it was not disputed that the processing at issue served a legitimate purpose of improving compliance with tax obligations and provides for procedures for selecting, collecting and processing data that was appropriate and proportionate to that purpose, the circumstances alleged could not lead to this processing as being regarded as failing to comply with the data minimization requirement. Furthermore, the Conseil d’Etat noted that the mere fact that the 'FATCA' agreement does not contain any stipulations on the length of time for which transferred data may be retained did not in itself, in view of the safeguards provided by US law, and in particular the Privacy Act of 1974, imply a failure to comply with Article 5(1)(e) GDPR. Secondly, the Association had held that although the Conseil d’Etat had ruled that the FATCA Agreement did not infringe Article 46 GDPR in previous decisi
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Association of Accidental Americans in FR
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
30 January 2024
Authority
Commission Nationale de l'Informatique et des Libertés
GDPRhub ID
gdprhub-court-7615About this data
Cite as: Cookie Fines. Association of Accidental Americans - France (2024). Retrieved from cookiefines.eu
Last updated: