Share on LinkedInShare on LinkedIn

ARTICLE · 12 NOVEMBER 2026

Jautiva: CJEU Judgment Limits Unrestricted Public Access To Shareholder Data

The Court of Justice of the European Union has ruled that EU law does not mandate public disclosure of shareholder information for public limited liability companies, finding that unrestricted access to such data violates GDPR protections. This landmark decision addresses the tension between corporate transparency objectives and fundamental privacy rights, potentially reshaping beneficial ownership regimes across the EU.

European UnionPrivacy

On 3 September 2026, the Court of Justice of the European Union (the “CJEU”) ruled that EU law does not require the public disclosure of information relating to shareholders of public limited liability companies. It also held that the General Data Protection Regulation (“GDPR”) precludes national legislation which makes such data available to the public where access is not subject to any conditions, such as the demonstration of a legitimate interest. Jautiva (C‑798/24) is a significant judgment which addresses the inherent risks in making shareholder data publicly available particularly where it can be accessible to an unlimited number of people and may be downloaded in bulk by any unidentified user. The decision represents a further development in recent CJEU case law on the interaction between corporate transparency, the protection of personal data and public-interest objectives.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from