### The Intersection of Shareholder Rights and GDPR: Insights for Data Protection Professionals
In a landmark case, the Court of Justice of the European Union (CJEU) recently addressed the rights of shareholders to access information about other shareholders within the framework of GDPR compliance. This case highlights the tension between established national legal precedents and the EU’s regulatory landscape.
**Key Considerations:**
– **Balancing Rights and Regulations:** Historically, German case law has emphasized the shareholder’s right to know the identities of fellow shareholders as an essential right. However, the advent of GDPR, which rigorously protects personal data, introduces complexities to this principle.
– **GDPR Compliance:** Article 6(1) of the GDPR is pivotal. For the processing of personal data to be lawful, it must meet specific criteria such as contractual necessity, legitimate interests, or compliance with legal obligations. The CJEU underscores that these grounds must be analyzed on a case-by-case basis for each disclosure.
**Practical Implications:**
– **Alternative Solutions:** The CJEU suggested alternative solutions for communication among shareholders, such as using intermediaries to relay messages when direct disclosure of personal data does not comply with GDPR.
**Legal and Strategic Evaluation:**
– The decision prompts companies and legal practitioners to re-evaluate existing shareholder agreements and practices, ensuring they align with both GDPR requirements and shareholder rights.
– Organizations must thoroughly assess their data processing activities to ascertain compliance while respecting shareholder agreements.
For data protection experts, this case underlines the need for dynamic strategies that accommodate evolving legal interpretations while safeguarding privacy rights. How are you balancing these intricacies in your data governance strategies? Share your insights and let’s discuss.
[Original article URL](https://www.grantthornton.cz/en/news/the-right-to-information-about-other-shareholders-in-confrontation-with-the-gdpr/)