“The use of personal data is not subject to the obligation to inform and obtain the prior consent of the data controller when personal data are collected and processed in the context of legal proceedings”. This is “provided that the data are inherent to the area of business and litigation that justifies their collection, that they are not used for purposes other than those of justice for which they were collected, and that the authorizing measure is in place”.
This has been stated by the Court of Cassation, decision no. 24797/2024 of 16 September 2024.
In detail, a few employees – each in the context of their own dispute over matters relating to their employment relationship – had submitted to the court a recording of a conversation that had taken place some years earlier between one of their colleagues and some executives of the employer company. The recording was made without the knowledge or permission of the participants. The executives involved claimed the matter to the data protection authority, which rejected the claim on the assumptions that the recording, and thus the related processing of personal data, had been carried out for purposes related to contesting charges in the context of the employment relationship. At this point, the executives appealed to the ordinary courts.
In addition to the well-established national case-law on the subject, the Supreme Court also refers to the Court of Justice (EU) which, in its judgment of 2 March 2023, C-268/21 – Norra Stockholm Bygg AB v Per Nycander AB, made it clear that “where personal data of third parties are used in a case, it is for the national court to weigh, in full knowledge of the facts and in accordance with the principle of proportionality the interests concerned” and “that assessment may, where appropriate, lead him to authorize the full or partial disclosure to the other party of the personal data thus disclosed to him if he considers that such disclosure does not go beyond what is necessary to ensure the effective enjoyment of the rights which individuals derive from Article 47 of the Charter”.
The Court of Cassation also remainds that “Articles 17 and 21 of the GDPR make it clear that, in the balancing of the interests involved, the right to defend oneself in court may be considered overriding over the rights of the data subject to the processing of personal data”.
Con la recentissima sentenza n. 11344 del 30 aprile 2025, la Corte di Cassazione ha chiarito che i procedimenti giudiziali introdotti con il c.d. Rito Fornero prima del 28 febbraio 2023 continuano ad essere disciplinati, anche nelle fasi di impugnazione, dalle disposizioni dettate dal medesimo rito, sebbene lo stesso sia stato abrogato dalla c.d. Riforma ....
In recent years, terms such as smart working, agile working or workation have become firmly established in the working lexicon. These new ways of working bring with them opportunities and competitiveness, but also new responsibilities and risks, especially in terms of health and safety. The concept of a “workplace” is no longer only linked to ....
On 31 December 2024, the Correttivo Decree (Legislative Decree no. 209/2024) to the Code of Public Contracts referred to in Legislative Decree 36/2023 was published in the Official Gazette. This decree aims to rationalise and simplify the code discipline, improving its homogeneity, clarity and adequacy, in order to facilitate the relaunch of public investments also ....
Managing employee surveillance is a sensitive issue, especially with the rise of new technologies. Recent rulings from Italy’s Court of Cassation have clarified the legal boundaries surrounding this practice. The role of Investigative Agencies Employers may use private investigators to check potential employee misconduct, such as unapproved absences or misuse of leave. However, these investigations must ....
