BIANCARDI v. ITALY JUDGMENT RELEVANT LEGAL FRAMEWORK AND PRACTICE I. RELEVANT DOMESTIC LAW Legislative Decree no. 196 of 30 June 2003 (Personal Data Protection Code) 15. The relevant provisions of the Personal Data Protection Code read as follows: Article 7: Right to access personal data, and other rights “... 3. (a) The data subject has the right to obtain the removal, the anonymisation or the interruption of the processing of data that are being used illegally. ... Article 11: Arrangements for the processing and categorisation of data “1. Personal data undergoing processing are: ... (e) kept, in a form that allows the identification of the person concerned, for a period not exceeding the time necessary to achieve the objectives for which the data have been collected and subsequently processed. ...” Article 15: Damage arising from data processing “A person causing damage to a third person as a consequence of the processing of his or her personal data must compensate the person concerned under Article 2050 of the Civil Code. The person concerned is also entitled to obtain compensation for nonpecuniary damage resulting from the breach of Article 11.” Article 25: Prohibition of communication and dissemination “Communication and dissemination are prohibited in respect of ...: (a) personal data whose removal has been ordered, after the period of time indicated in Article 11 § (1) (e) has elapsed ...” Article 99: Compatibility of the objectives and the length of processing “1. The processing of personal data for historical, scientific or statistical research purposes is considered to be compatible with the different objectives for which the data was initially collected or processed. 2. The processing of personal data for historical, scientific or statistical research purposes may be carried out also upon the expiry of the period that is necessary for achieving the different purposes for which the data was initially collected and processed. ...” 4

Select target paragraph3