Schecke: Transparency Does Not Automatically Trump Data Protection

Joined Cases C-92/09 and C-93/09 | Court of Justice of the European Union | Grand Chamber | 9 November 2010

Practice takeaways: ① Publishing a person’s name together with financial information can interfere with both privacy and data-protection rights, even where the information concerns professional activities. ② Transparency is a legitimate objective of general interest, but it does not automatically override fundamental rights. ③ Proportionality requires lawmakers to consider whether less intrusive measures could accomplish the same objective. ④ Simply informing individuals that their data will be published is not the same as obtaining their consent. ⑤ Public disclosure rules should distinguish among individuals where relevant criteria—such as the amount, frequency, nature, or duration of public funding—could reduce the interference while preserving transparency. ⑥ The Court treated legal persons differently from natural persons and upheld the publication regime insofar as it concerned legal persons.

Schecke asked a question that has become increasingly important in the age of searchable public databases: When government transparency requires publication of personal information, how much disclosure is too much?

EU legislation required Member States to publish information about recipients of agricultural subsidies. For each beneficiary, the online database disclosed identifying information and the precise amounts received. The purpose was legitimate: increasing transparency in the use of public funds and improving public oversight.

But the Court held that legitimacy of purpose was only the beginning of the analysis.

Publishing personal data interfered with the fundamental rights protected by Articles 7 and 8 of the Charter. And under Article 52(1), such an interference had to be proportionate. The EU institutions therefore had to demonstrate that the particular form of disclosure they selected was necessary—not merely that transparency itself was desirable. (Judgment, paras. 46–52, 64–77.)

The problem was that the legislation required essentially indiscriminate publication of information about all natural-person beneficiaries, without distinguishing among them based on criteria such as the amount or frequency of the aid received.

That was not enough balancing for the Court.

What happened

Volker und Markus Schecke GbR was an agricultural undertaking organized as a partnership, and Hartmut Eifert was a full-time farmer. Both operated in the German Land of Hesse and applied for agricultural funding from the European Agricultural Guarantee Fund (EAGF) or European Agricultural Fund for Rural Development (EAFRD). Their applications were approved for the 2008 financial year. (Judgment, para. 25.)

The application forms informed applicants that information concerning beneficiaries of those funds would be published. (Judgment, para. 26.)

Under the applicable EU legislation, Member States were required to publish annually the beneficiaries of agricultural aid and the amounts received. Commission Regulation No 259/2008 specified that the publication would include, among other things, the beneficiary’s name, municipality, possibly postal code, and the amounts received. The information was made available on a single searchable website in each Member State. (Judgment, paras. 16, 21–24.)

Germany implemented that requirement through a website operated by the Bundesanstalt für Landwirtschaft und Ernährung (Bundesanstalt). The website made beneficiaries searchable by name, location, and amount received. (Judgment, para. 27.)

Schecke and Eifert challenged the publication of their information, arguing that making those details publicly available constituted an unjustified interference with their rights to privacy and data protection. (Judgment, para. 28.)

The Verwaltungsgericht (Administrative Court) Wiesbaden referred a series of questions to the CJEU, including whether the EU provisions requiring publication were valid in light of fundamental-rights protections. (Judgment, paras. 30–35.)

Why the case matters

Schecke is important because it places proportionality at the center of public disclosure of personal data.

The Court did not say that transparency was unimportant. Quite the opposite. It recognized transparency regarding the use of public funds as an objective of general interest and acknowledged that publishing information about beneficiaries could reinforce public control over how EU money was spent. (Judgment, paras. 67–71.)

But the Court rejected the idea that identifying a legitimate objective ends the analysis.

The question was not simply: “Is transparency important?”

It was: “Is this particular disclosure of personal data necessary to achieve that transparency?”

That distinction matters well beyond agricultural subsidies.

Whenever legislation or government policy requires publication of personal information—whether through public registers, searchable databases, enforcement disclosures, professional registries, or expenditure records—Schecke requires attention to the design of the disclosure itself: Who is identified? What information is published? For how long? In what form? Could categories, thresholds, aggregation, or other limitations accomplish substantially the same objective with less interference?

The case therefore turns proportionality from an abstract principle into something closer to a design requirement.

Key holding

The Court reached several connected conclusions.

• First, Articles 7 and 8 of the Charter protect respectively the right to private life and the right to protection of personal data. Those rights are closely connected but are not absolute. Limitations may be imposed where the requirements of Article 52(1) of the Charter are satisfied. (Judgment, paras. 47–52.)
• Second, publishing the names of identifiable beneficiaries together with the precise amounts of agricultural aid they received constituted an interference with those rights. That remained true even though the information related to professional activities. (Judgment, paras. 56–60.)
• Third, the beneficiaries had not consented merely because their application forms informed them that publication would occur. The legislation itself contemplated informing beneficiaries; it did not seek to make publication dependent upon their consent. (Judgment, paras. 61–64.)
• Fourth, transparency in the expenditure of public funds was a legitimate objective of general interest. (Judgment, paras. 67–71.)
• But fifth—and most importantly—the legislature had not shown that indiscriminately publishing the names and exact amounts received by all natural-person beneficiaries was necessary. The Council and Commission had not sufficiently considered alternatives that might achieve transparency while interfering less with privacy and data protection. (Judgment, paras. 76–86.)

The Court therefore declared the relevant provisions invalid insofar as they required publication of personal data concerning natural-person beneficiaries without distinctions based on relevant criteria such as the duration, frequency, nature, or amount of aid received. (Judgment, paras. 89–92.)

The Court’s analysis

1. Privacy and data protection are fundamental rights

The Court began with the Charter.

• Article 8(1) expressly provides that everyone has the right to protection of personal data concerning them. That right is closely connected with the right to respect for private life guaranteed by Article 7. (Judgment, para. 47.)
• Neither right is absolute. Article 52(1) permits limitations where they are provided by law, respect the essence of the rights, and—subject to proportionality—are necessary and genuinely meet an objective of general interest recognized by the Union or protect the rights and freedoms of others. (Judgment, paras. 48–50.)

That framework supplied the basic test for the rest of the judgment.

2. Professional information can still implicate private life

The information at issue was not about intimate family matters. It related to agricultural businesses and public subsidies. That did not place it outside the protection of private life.

The published amounts formed part—often a considerable part—of the beneficiaries’ income. Making their names and exact payments available to third parties therefore interfered with Article 7. (Judgment, para. 58.)

The Court expressly rejected the idea that information loses privacy protection because it concerns professional activity. Referring to its earlier case law and that of the European Court of Human Rights, it emphasized that “private life” cannot be interpreted so narrowly. (Judgment, para. 59.)

This is an important continuation of the Court’s earlier reasoning in Österreichischer Rundfunk, where salary information associated with identifiable individuals was likewise capable of engaging privacy rights.

Practice Tip: Do not assume that information falls outside privacy protections simply because it concerns a person’s professional or business activities. Schecke confirms that information about business activities and public subsidies can still implicate the fundamental right to private life.

3. Notice was not consent

Land Hessen argued that the applicants had been informed of the publication requirement when they applied for agricultural aid and had nevertheless submitted their applications.

The Court did not treat that as consent.

The relevant EU legislation required beneficiaries to be informed that their data would be made public. It did not purport to make the processing dependent upon their agreement. The application forms likewise stated that the applicants were aware of the publication requirement. (Judgment, paras. 61–63.)

Accordingly, the Court analyzed the publication as an interference requiring justification under Article 52(1), rather than as processing authorized by consent. (Judgment, para. 64.)

That distinction between notice and consent remains one of the practically useful aspects of Schecke.

4. Transparency was a legitimate objective

The Court had little difficulty accepting the importance of transparency.

The legislation sought to increase transparency regarding the use of Common Agricultural Policy funds and improve sound financial management by reinforcing public control over public expenditures. (Judgment, paras. 67–69.)

Transparency also facilitates public participation and accountability. Publication of agricultural-funding information could allow citizens to participate more meaningfully in debate about the direction of the common agricultural policy (CAP). (Judgment, paras. 68–71.)

5. Proportionality required more than invoking a good purpose

The objective of transparency had to be reconciled with Articles 7 and 8, and limitations on personal-data protection could apply only insofar as strictly necessary. (Judgment, paras. 76–77.)

The Court therefore asked whether the Council and Commission had actually balanced the public interest in transparency against the impact on individuals’ privacy and data-protection rights.

For natural persons, the answer was no.

6. The legislature had not seriously examined less intrusive alternatives

The publication regime applied broadly to all natural-person beneficiaries. It did not distinguish among them based on the size of the payment, how frequently the individual received aid, how long aid had been received, or the nature of the assistance. The Court found no indication that lawmakers had considered whether more limited forms of publication could still provide meaningful public oversight while reducing the interference with fundamental rights. (Judgment, paras. 79–83.)

Possible alternatives included limiting publication by reference to the duration, frequency, nature, or amount of aid. Publication concerning other beneficiaries might then be supplied in another form. (Judgment, paras. 81–83.)

The problem was the absence of meaningful balancing.

7. Transparency does not receive automatic priority

The institutions argued, among other things, that the CAP represented an important portion of the EU budget. The Court rejected the idea that the scale of the public interest permitted transparency simply to prevail.

It stated that no automatic priority could be conferred on transparency over protection of personal data, even where important economic interests were involved. (Judgment, paras. 84–85.)

Fundamental-rights balancing cannot be replaced by declaring one public objective important enough to win automatically.

8. The rules were disproportionate for natural persons

Because less intrusive approaches were conceivable and the institutions had not adequately examined them, the Court concluded that requiring publication of the names of all natural-person beneficiaries together with the precise amounts they received exceeded the limits imposed by proportionality. (Judgment, para. 86.)

The Court consequently declared the relevant provisions invalid insofar as they imposed that obligation with respect to natural persons without drawing distinctions based on relevant criteria. (Judgment, paras. 89–92.)

9. Legal persons were treated differently

The legal-person issue requires some care.

The Court first held that legal persons could invoke Articles 7 and 8 in relation to identification only insofar as the legal entity’s official name itself identified one or more natural persons. In the case of Volker und Markus Schecke GbR, the partnership’s official title directly identified its partners. (Judgment, paras. 53–54.)

The seriousness of the interference was different, legal persons were already subject to broader publication requirements, and requiring national authorities to examine individually whether each legal entity’s name happened to identify natural persons would create an unreasonable administrative burden. (Judgment, para. 87.)

The Court therefore concluded that the publication rules struck a fair balance insofar as they concerned legal persons. (Judgment, para. 88.)

The Advocate General’s Opinion

Advocate General Eleanor Sharpston framed the case as a conflict between transparency and the fundamental rights to privacy and data protection. Transparency promotes accountability and public scrutiny, she explained, but “maximum transparency” cannot automatically override individual rights. (Opinion, paras. 65–70.)

She also emphasized that internet publication is particularly intrusive because information becomes widely accessible and searchable—features that must be considered in the proportionality analysis. (Opinion, para. 96.)

On consent, Sharpston concluded that notice of publication was not the “unambiguous” and “freely given” consent required by Directive 95/46 (the Data Protection Directive), particularly where farmers might depend heavily on CAP funding. (Opinion, paras. 74–86.)

Most importantly, proportionality had to be assessed against a precise objective, not “transparency” in the abstract. Less intrusive approaches—such as thresholds or aggregated data—might achieve the particular objective. (Opinion, paras. 104–105, 118–120.)

The more intrusive the disclosure, the stronger the justification for why that particular disclosure is necessary.

The Court ultimately followed a similar approach, focusing on the failure to balance transparency against Articles 7 and 8 and consider less intrusive alternatives.

What the Court did—and did not—decide

The Court held that publishing identifiable individuals’ agricultural subsidies interfered with Articles 7 and 8 of the Charter. Although transparency was a legitimate objective, it did not automatically prevail over data protection. Because the rules indiscriminately required publication without adequate proportionality analysis, they were invalid as to natural persons.

The Court did not prohibit publication of public-fund recipients, prescribe a particular threshold or publication model, or require transparency always to yield to data protection. Nor did it invalidate the publication regime as applied to legal persons.

The central rule is therefore narrower—and more useful:

Public disclosure of personal data requires a genuine proportionality analysis. A legitimate transparency objective does not eliminate the obligation to ask whether the same objective can be achieved through less intrusive means.

Schecke under today’s GDPR

Schecke was decided under Directive 95/46 and the Charter, but its constitutional logic remains directly relevant under the GDPR.

The GDPR continues to operate alongside Articles 7 and 8 of the Charter, and the GDPR itself repeatedly incorporates the principles reflected in Schecke: lawfulness, purpose limitation, data minimization, and proportionality.

A modern version of the Schecke problem would therefore involve at least two related inquiries.

• First, there must be a lawful basis for the disclosure. For public authorities, that will commonly involve processing necessary for compliance with a legal obligation or performance of a task carried out in the public interest under Article 6 GDPR.
• Second, the design of the disclosure must remain compatible with the GDPR’s broader principles—particularly the requirement that personal data be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

If the purpose is public accountability, the relevant question is not simply whether publication contributes to accountability. It is whether publishing this information, about these individuals, in this form and at this level of granularity is necessary for that objective.

Schecke also fits naturally with the Court’s broader data-protection jurisprudence. In Satakunnan & Satamedia, which the Court expressly cited, the CJEU emphasized that limitations on data protection must remain strictly necessary. Later cases would develop proportionality much further in other contexts, particularly where large-scale collection, retention, or access to personal data was involved.

The contexts differ, but the underlying discipline is familiar:

Start with the purpose. Identify the interference. Then ask whether a less intrusive method can accomplish the same legitimate objective.

Conclusion

Schecke does not reject government transparency.

It rejects unexamined transparency.

Publishing information about how public money is spent can serve an important democratic function. But when transparency requires publishing personal data, lawmakers must still justify the particular disclosure they choose.

That requires more than identifying a worthy objective.

It requires asking whether the data disclosed, the persons identified, the level of detail, and the method of publication are genuinely necessary—or whether the same transparency can be achieved with less interference with fundamental rights.

The public may have a legitimate interest in knowing how public money is spent. But that does not mean every recipient must automatically become a searchable data point.

Sources and Useful Reading

Sources

CJEU judgments, Advocate General opinions, and related case materials are available through InfoCuria, the Court of Justice of the European Union’s official case-law database. The case can be located using Joined Cases C-92/09 and C-93/09.

• Court of Justice of the European Union, Grand Chamber, Joined Cases C-92/09 and C-93/09, Volker und Markus Schecke GbR v Land Hessen and Hartmut Eifert v Land Hessen, Judgment of 9 November 2010, ECLI:EU:C:2010:662.
• Opinion of Advocate General Eleanor Sharpston, Joined Cases C-92/09 and C-93/09, delivered 17 June 2010, ECLI:EU:C:2010:353.

Useful reading from The De La Torre Review

• Österreichischer Rundfunk: When Salary Transparency Meets the Right to Privacy — An important precursor to Schecke, establishing that disclosure of financial information linked to identifiable individuals can interfere with private life even when the information concerns professional activities. Schecke expressly relied on this reasoning in assessing publication of agricultural-aid recipients’ names and payments. (Schecke, paras. 58–59.) Read the Article.
• Satakunnan & Satamedia: Public Data Is Still Personal Data — The Court relied on Satakunnan & Satamedia in Schecke for the principle that derogations and limitations concerning the protection of personal data must apply only insofar as they are strictly necessary—a principle central to its proportionality analysis. (Schecke, para. 77.) Read the Article.
• Digital Rights Ireland: Why Communications Metadata Can Reveal a Life — A later and more consequential application of the Charter’s necessity and proportionality requirements in the context of communications metadata. Like Schecke, Digital Rights Ireland illustrates that an important public-interest objective does not dispense with the need for carefully tailored limits on interferences with Articles 7 and 8 of the Charter. Read the Article.
• Bavarian Lager: When Transparency Requests Become Data-Protection Questions — Several months earlier, in Bavarian Lager, the Court confronted the same tension from a different direction. It held that a request for access to an EU document did not displace data-protection rules governing the personal data contained within it. Schecke would take the issue further, asking when the law itself requires personal data to be made publicly available. Read the Article.
• ASNEF: When Member States Cannot Rewrite the Lawful Bases for Processing — Builds on Schecke’s recognition of the importance of privacy and data protection under Articles 7 and 8 of the Charter. ASNEF applies those fundamental rights in the legitimate-interest context, requiring them to be weighed against the controller’s interests in the circumstances of the particular case. Read the Article.