Processing of employee personal data for employment purposes on the basis of “more specific rules” (Article 88 GDPR) – judgments of the Court of Justice of the EU, cases C-34/21 and C-65/23

The protection of personal data of natural persons in the employment is regulated by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”). In accordance with Article 88 of the GDPR Member States may provide for more specific rules to ensure the protection of employees’ rights and freedoms in respect of the processing of employees’ personal data in the employment context. The Court of Justice of the EU interpreted the concept of “more specific rules” in the judgment of 30 March 2023 in case C-34/21, Hauptpersonal rat der Lehrerinnen und Lehrer beim Hessischen Kultusmin isterium vs. Minister des Hessischen Kultusministeriums. In the judgment of 19 December 2024 in case C-65/23, MK v K GmbH, the Court again ruled on this issue, defining the relationship between Article 88 of the GDPR and other provisions of that regulation.

Bibliografia/References

Łukańko, B. (2024). „Bardziej szczegółowe przepisy” dotyczące przetwarzania danych osobowych w rozumieniu art. 88 RODO – glosa do wyroku TSUE z dnia 30 marca 2023 r., C-34/21 (Hauptpersonalrat der Lehrerinnen und Lehrer beim Hessischen Kultusministerium), Praca i Zabezpieczenie Społeczne, (2), s. 32–41. DOI 10.33226/0032-6186.2024.2.6

Kuba, M. (2018). W: E. Bielak-Jomaa, D. Lubasz (Red.), RODO. Ogólne rozporządzenie o ochronie danych. Komentarz. Wolters Kluwer.