CJEU - C‑258/23 to C‑260/23 - Imagens Médicas Integradas
CJEU rules business emails are 'communications' protected by CFR, but can be seized by competition authorities under
The Court of Justice of the European Union (CJEU) has ruled that business-related emails exchanged between employees and managers via an enterprise's email system are considered 'communications' protected by Article 7 of the Charter of Fundamental Rights (CFR). However, the court also held that national competition authorities can seize these emails during investigations without prior judicial authorization, provided there is a strict legal framework and adequate safeguards against abuse, including effective ex post judicial review.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Imagens Médicas Integradas?
Get an email when a new story names Imagens Médicas Integradas, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe CJEU ruling in C-258/23 to C-260/23 confirms that enterprise email communications carry fundamental rights protections under Article 7 of the EU Charter, meaning organizations must treat internal communications as personal and confidential data. However, national competition authorities retain the power to seize such emails without prior judicial authorization, provided robust legal safeguards and effective ex post judicial review exist. This creates a dual obligation for organizations: they must protect employee communications as sensitive data under GDPR and privacy law, while also being prepared for lawful regulatory access. Failure to understand this balance can expose organizations to both privacy violations and obstruction of legitimate regulatory investigations. Businesses must establish clear policies governing email data governance, retention, and lawful access procedures.