Court case 21-20.979 โ€“ Court Ruling (France, 2024)

Court Ruling
DPA CourdappeldeCaen3 October 2024France
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A data subject initiated civil proceedings against its employer (the controller). The data subject alleged wage and trade union discrimination. In first instance, the court examining the case ordered the controller to provide the data subject with employment data regarding nine designated employees, including pay slips of the last 3 years. The controller lodged an appeal against the order with the [https://www.cours-appel.justice.fr/caen Caen Court of Appeal] (Cour d'appel de Caen), which confirmed the decision of first instance. It considered that the production of payslips was not only necessary but also the only means available to the data subject to prove the alleged discrimination. The controller then appealed the case before the Supreme Court (Cour de cassation). The Supreme Court first recognised that the right to prove a discrimination can justify the production of documents containing (third party) personal data. Weighing this right to evidence against the right to data protection, the Supreme Court stated that the production of documents containing personal data must be indispensable to the exercise of the right to evidence and proportionate to the aim pursued. Applying the principle of data minimisation, the Supreme Court held that a Court ordering the production of such evidence must, where appropriate of its own motion, limit the production of documents to what is strictly necessary to prove discrimination. By requiring the controller to produce payslips, without limiting the data to be produced to what would be strictly necessary to the proof of discrimination, the Caen Court of Appeal therefore violated the principle of minimisation. The Court therefore overturned the decision of the Caen Court of Appeal and sent the case to [https://www.cours-appel.justice.fr/rouen the Rouen Court of Appeal] (Cour d'appel de Rouen).

GDPR Articles Cited

Art. 6 GDPR
Art. 5(1)(c) GDPR
Decision AuthorityCass.
Reviewed AuthorityCour d'appel de Caen
Full Legal Summary

A data subject initiated civil proceedings against its employer (the controller). The data subject alleged wage and trade union discrimination. In first instance, the court examining the case ordered the controller to provide the data subject with employment data regarding nine designated employees, including pay slips of the last 3 years. The controller lodged an appeal against the order with the [https://www.cours-appel.justice.fr/caen Caen Court of Appeal] (Cour d'appel de Caen), which confirmed the decision of first instance. It considered that the production of payslips was not only necessary but also the only means available to the data subject to prove the alleged discrimination. The controller then appealed the case before the Supreme Court (Cour de cassation). The Supreme Court first recognised that the right to prove a discrimination can justify the production of documents containing (third party) personal data. Weighing this right to evidence against the right to data protection, the Supreme Court stated that the production of documents containing personal data must be indispensable to the exercise of the right to evidence and proportionate to the aim pursued. Applying the principle of data minimisation, the Supreme Court held that a Court ordering the production of such evidence must, where appropriate of its own motion, limit the production of documents to what is strictly necessary to prove discrimination. By requiring the controller to produce payslips, without limiting the data to be produced to what would be strictly necessary to the proof of discrimination, the Caen Court of Appeal therefore violated the principle of minimisation. The Court therefore overturned the decision of the Caen Court of Appeal and sent the case to [https://www.cours-appel.justice.fr/rouen the Rouen Court of Appeal] (Cour d'appel de Rouen).

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 21-20.979 in FR

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

3 October 2024

Authority

DPA CourdappeldeCaen

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 21-20.979 - France (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: