> ## Content Index
> Fetch the complete content index at: https://www.thedelatorrereview.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Esch-Leonhardt: When a Personnel File Becomes Data Processing
- URL: https://www.thedelatorrereview.com/esch-leonhardt-when-a-personnel-file-becomes-data-processing/
- Published: 2004-02-18T08:07:00.000Z
- Updated: 2026-09-02T08:44:37.000Z
- Description: When ECB employees challenged union-related warning letters placed in their personnel files, the EU court clarified a basic privacy rule: filing employee information is data processing. Esch-Leonhardt explores necessity, sensitive union data, and when data is manifestly made public.
- Author: Lydia
- Tags: Court of Justice of the European Union (CJEU), Caselaw, HR Privacy, Data Protection Law, Special/Sensitive Category Data, Data Minimization, Lawfulness, Personal Information, Privacy Law, Contractual Necessity, General Data Protection Regulation (GDPR)

**Case T-320/02 | Court of First Instance of the European Communities (Second Chamber) | Judgment of 18 February 2004 | ECLI:EU:T:2004:45**

> **Practice takeaways:** ① Putting a document into an employee’s personnel file constitutes processing of personal data. ② **An employer cannot avoid data-protection obligations by characterizing personnel-file administration as a merely mechanical act.** ③ Employment-related warnings may be retained where they are necessary to the employment relationship and potentially relevant to assessing workplace conduct. ④ **Minimization does not necessarily require redacting** context that is relevant to understanding that conduct. ⑤ Information revealing **trade-union membership receives heightened protection.** ⑥ But where employees themselves **manifestly make that information public**, the applicable special-category prohibition may not apply.

Three European Central Bank employees used the ECB’s internal email system to circulate information on behalf of a trade union. The ECB responded with warning letters and placed those letters in the employees’ personnel files.

Was that simply internal HR administration?

No. In *Esch-Leonhardt*, the Court of First Instance held that **placing information about an employee into a personnel file constitutes processing of personal data**. The ECB could not characterize filing the letters as a merely mechanical administrative act. Once it stored personal data in a structured personnel file, EU data-protection rules applied.

The Court nevertheless upheld the ECB’s decision. The warning letters related to the employees’ service and could be relevant to evaluating their workplace conduct, making their retention necessary for performance of the employment relationship. Nor was the ECB required to redact the union-related context: why the employees had used the email system mattered to assessing their conduct.

And although information revealing trade-union membership received heightened protection, the Court found no violation. The emails did not expressly state that the employees were union members. **But even assuming their union activity revealed membership, the employees had themselves** **manifestly made that information public**.

## The Court’s Analysis

The Court first rejected the idea that placing the letters in the employees’ personnel files was merely a mechanical administrative act. A personnel file is a personal-data filing system, and storing information in it constitutes **processing of personal data**. The ECB therefore had to comply with Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (Regulation 45/2001) when deciding what information to retain.

The employees argued that the letters contained specially protected information concerning **trade-union membership**. The Court was more cautious. Neither the emails nor the warning letters expressly stated that the employees were IPSO members; they showed that the employees had acted on behalf of the union. Even assuming that this revealed union membership, however, the employees had **manifestly made the information public** by circulating the emails themselves. Their later response to the ECB went further, expressly identifying them as IPSO members—and they themselves requested that response be included in their personnel files. 

That did not end the inquiry. The processing still required a lawful basis and the Court found one under Article 5(c) of Regulation 45/2001\. Contractual necessity, since retaining the warning letters was necessary for the employment relationship. **The letters concerned the employees’ workplace conduct and could be relevant to its later assessment.**

The Court also rejected the employees’ proposed alternative of retaining the letters while redacting references to IPSO. The union context helped explain **why** the employees had used the email system and therefore could affect how their conduct should be evaluated. Removing it would have made the employment record less complete and potentially less meaningful.

## Why *Esch-Leonhardt* Still Matters

The lasting point is simple: **putting information into a personnel file is itself data processing.**

An employer therefore cannot treat filing a warning, complaint, investigation report, evaluation, or similar document as purely administrative. It must consider whether the processing is lawful, whether the record contains specially protected information, and whether retaining that information is actually necessary.

*Esch-Leonhardt* also shows that **minimization does not always mean redaction**. Sometimes context—including sensitive context—is necessary to understand the conduct being documented.

### Conclusion

The Court dismissed the employees’ challenge. But the case established an important employment-privacy principle:

---

> **A personnel file is a personal-data filing system, and deciding what goes into it is a data-protection decision.**

---

Here, the ECB could retain the complete warning letters because they were relevant to the employment relationship, the employees had themselves made their connection with IPSO public, and the union context was relevant to understanding the conduct being recorded.

## Sources and Additional Resources

### Sources

CJEU judgments, procedural orders, notices, summaries, and related case materials are available through **InfoCuria**, the Court of Justice of the European Union’s official case-law database.

[Search Case T-320/02 on InfoCuria](https://infocuria.curia.europa.eu/tabs/affair?lang=en&searchTerm=%2522T%252D320%252F02%2522&publishedId=T-320%2F02&ref=thedelatorrereview.com)

- **Court of First Instance of the European Communities, Second Chamber, Case T-320/02, *Monika Esch-Leonhardt, Tillmann Frommhold and Emmanuel Larue v European Central Bank*, Judgment of 18 February 2004, ECLI:EU:T:2004:45.**
- **President of the Court of First Instance, Case T-320/02 R, *Monika Esch-Leonhardt and Others v European Central Bank*, Order of 19 December 2002.** The order rejected the applicants’ request for interim removal of the disputed letters from their personnel files for lack of urgency.

**Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000** on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data. [Read the Regulation.](https://eur-lex.europa.eu/eli/reg/2001/45/oj/eng?ref=thedelatorrereview.com)

![](https://storage.ghost.io/c/54/ef/54efeb65-4f2f-479e-b4bb-a9ee526feeaa/content/images/2026/09/ChatGPT-Image-Jul-4--2026-at-04_44_14-PM-6.png)