HIGHLIGHTS

EU Court Confirms Competition Authorities May Inspect Personal Devices During Antitrust Investigations

1. Background

The Court of Justice of the European Union (CJEU) has clarified the scope of powers available to European competition authorities when investigating suspected anticompetitive conduct by businesses.

The judgment addresses an increasingly important issue arising from the widespread use of personal smartphones, laptops, and tablets for business communications. With the growth of hybrid and remote working, employees and managers frequently use personally owned devices for emails, messaging applications, collaboration platforms, and other business-related communications.

The Court’s approach recognizes that business-related information does not necessarily remain on company-owned devices. Relevant documents and communications may also be stored on personal electronic devices.

Competition authorities have argued that limiting inspections to corporate devices could allow businesses or employees to conceal evidence of unlawful conduct. Businesses, however, have raised concerns regarding privacy, personal correspondence, and the protection of personal data.

The judgment therefore addresses the difficult balance between effective competition-law enforcement and the protection of individual privacy.

2. Current Development

The Court has clarified that competition authorities may, subject to the applicable legal requirements, examine personal electronic devices where they contain business-related communications relevant to an antitrust investigation.

The ruling recognizes that business documents and communications cannot be defined solely by reference to the ownership of the device on which they are stored. Emails, messages, files, and other digital communications relating to business activities may constitute relevant evidence even when located on a personally owned device.

However, the Court also emphasized that investigative powers are not unlimited. Competition authorities must conduct inspections in a manner that respects fundamental rights, including the rights to privacy and protection of personal data.

Appropriate safeguards may include:

• Filtering mechanisms;
• Separation of personal and business data;
• Appropriate technical safeguards;
• Review protocols;
• Encryption or other security measures; and
• Procedures for preventing unnecessary access to private correspondence.

The judgment therefore attempts to establish a balance between effective enforcement of EU competition law and protection of fundamental rights.

3. Legal Analysis

A. Investigatory Powers Under EU Competition Law

The legal framework for competition investigations is primarily governed by Council Regulation (EC) No. 1/2003.

The European Commission has investigative powers to detect and investigate violations of EU competition law, particularly conduct prohibited under Articles 101 and 102 of the Treaty on the Functioning of the European Union (TFEU).

Article 101 generally prohibits agreements, decisions, and concerted practices that have as their object or effect the prevention, restriction, or distortion of competition.

Article 102 prohibits the abuse of a dominant position within the internal market where such conduct affects trade between EU Member States.

Effective enforcement of these provisions increasingly requires regulators to examine electronic evidence.

B. Business Data on Personal Devices

A significant aspect of the judgment is the recognition that the location or ownership of a device does not necessarily determine the legal character of the information stored on it.

For example, an employee may use a personal smartphone to communicate with colleagues or competitors concerning business matters. Similarly, a personal laptop may contain work-related emails or documents.

If such material is relevant to an antitrust investigation, its presence on a personal device does not automatically place it outside the scope of legitimate regulatory scrutiny.

C. Principle of Proportionality

Despite the broad investigative powers available to competition authorities, those powers must be exercised according to the principle of proportionality.

An inspection should be limited to what is necessary for the legitimate purpose of the investigation. Authorities should avoid accessing information that is purely personal and unrelated to the suspected competition-law violation.

This requirement is particularly important because personal devices may contain sensitive information such as:

• Private emails;
• Family communications;
• Personal photographs;
• Financial information;
• Health-related information; and
• Other confidential personal data.

D. Protection of Fundamental Rights

The investigation must also comply with the Charter of Fundamental Rights of the European Union.

Article 7 protects respect for private and family life, home, and communications.

Article 8 recognizes the right to the protection of personal data.

Therefore, competition enforcement cannot operate independently of fundamental-rights protections. Authorities must ensure that their investigative methods do not result in unnecessary or disproportionate interference with private life.

4. Why the Judgment Matters

The judgment is significant for several reasons:

1. Strengthening Competition Investigations

The decision enables competition authorities to access relevant business evidence even where that evidence is stored on personally owned electronic devices, subject to legal safeguards.

2. Addressing Digital Business Practices

Modern businesses increasingly rely on smartphones, messaging applications, cloud platforms, and remote-working systems. The judgment reflects the reality that business communications are no longer confined to traditional corporate infrastructure.

3. Preventing Concealment of Evidence

Employees or businesses cannot necessarily avoid regulatory scrutiny simply because business communications were conducted through a personal device.

This may assist authorities in detecting:

• Cartels;
• Price-fixing arrangements;
• Market-sharing agreements;
• Abuse of dominant positions; and
• Other anticompetitive practices.

4. Protection of Privacy

At the same time, the decision recognizes that regulatory investigations must respect privacy and data-protection rights.

The ruling therefore does not provide competition authorities with unrestricted access to all information contained on a personal device.

5. Corporate Compliance

The judgment highlights the importance for multinational companies to establish clear Bring Your Own Device (BYOD) and digital communications policies.

Businesses may need to reconsider how employees use personal devices for professional communications and how relevant business records are preserved.

5. Impact on Businesses

The ruling may have significant practical consequences for businesses operating in the European Union.

Companies should consider implementing:

• Clear policies governing personal-device use;
• Procedures for separating personal and professional data;
• Data-retention policies;
• Employee training concerning competition law;
• Secure business communication systems;
• Compliance procedures for regulatory inspections; and
• Protocols for responding to competition-authority investigations.

Companies should also ensure that employees understand that using a personal device for business purposes does not necessarily mean that business communications become immune from regulatory investigation.

6. International Legal Significance

The judgment reflects a broader challenge facing regulators worldwide: how traditional investigative powers should operate in an increasingly digital economy.

The distinction between personal and professional technology has become less clear because employees frequently conduct business through devices that they personally own.

The decision may therefore influence future discussions concerning:

• Digital evidence;
• Data protection;
• Workplace privacy;
• Competition-law investigations;
• Corporate compliance; and
• Regulatory access to electronic communications.

It demonstrates the need for competition law to adapt to changing technological and workplace practices while maintaining fundamental-rights protections.

7. Conclusion

The CJEU’s decision represents an important development in EU competition law and digital investigations.

By recognizing that relevant business communications may exist on personal devices, the Court has strengthened the ability of competition authorities to investigate suspected anticompetitive conduct in modern digital workplaces.

At the same time, the Court has emphasized that such powers are subject to proportionality and fundamental-rights protections, particularly the rights to privacy and personal-data protection.

The judgment therefore seeks to maintain an appropriate balance between effective enforcement of competition law and respect for individual privacy. It is likely to have a lasting impact on corporate compliance, digital evidence collection, and competition investigations across the European Union.

8. References

1. Treaty on the Functioning of the European Union (TFEU) – Articles 101 and 102.
2. Council Regulation (EC) No. 1/2003 on the implementation of the EU competition rules.
3. Charter of Fundamental Rights of the European Union – Articles 7 and 8.
4. European Commission – Competition Policy and Inspection Guidelines.
5. European Commission, Directorate-General for Competition – Competition enforcement materials.
6. Reuters – Reports on EU competition investigations and digital evidence.
7. MLex – Coverage of European competition-law developments.
8. Bloomberg Law – Analysis of EU competition investigations.
9. Euractiv – European competition and regulatory developments.
10. Financial Times – Reports on EU competition enforcement and corporate compliance.