Privacy and Tax Information Powers

Why It Matters

The ruling forces EU states to tighten tax‑information procedures, curbing arbitrary access and ensuring effective remedies, which will alter compliance and data‑sharing frameworks. It also signals heightened scrutiny of international tax information exchanges for privacy compliance.

Key Takeaways

• ECHR found Italy’s tax data requests breach Article 8 privacy rights
• Unfettered discretion without binding guidelines violates principle of legality
• Effective judicial review required before or shortly after data collection
• Cross‑border info exchange must respect ECHR privacy standards
• Administrative circulars alone cannot limit tax authority’s investigative powers

Pulse Analysis

Tax administrations across Europe have increasingly leaned on banks to supply detailed financial records, a practice that collides with growing privacy expectations. The European Court of Human Rights’ 8 January 2026 judgment in Ferrieri and Bonassisa v Italy underscores that merely having a statutory provision is insufficient; the law must be precise, publicly accessible, and foreseeable. By invoking Article 8, the Court reminded governments that personal banking data—whether linked to income, assets, or business activity—constitutes private life, and any intrusion must survive a strict proportionality test.

The Court articulated four core requirements for a measure to be "in accordance with the law": a clear domestic legal basis, accessibility to the affected individual, foreseeability of consequences, and compatibility with the rule of law. Italy’s reliance on internal administrative circulars failed because those guidelines were not binding and left the tax authority’s discretion effectively unchecked. Moreover, the judgment stressed that effective judicial oversight—either pre‑emptive or promptly post‑decision—is essential to prevent arbitrary data grabs. Domestic courts can no longer treat tax‑information requests as merely preparatory; they must provide a timely, adversarial avenue for challenge, or risk rendering tax assessments vulnerable to reversal.

Beyond Italy, the decision reverberates through the international tax‑information ecosystem. OECD and UN Model Tax Conventions permit the exchange of taxpayer data, yet the ECHR ruling suggests that any transferred information must not have been obtained in breach of Article 8. States must therefore vet both the legality of their own data‑collection methods and the privacy safeguards of recipient jurisdictions. Failure to do so could expose cross‑border exchanges to legal challenges, prompting a wave of reforms aimed at aligning tax‑compliance tools with fundamental human‑rights standards. The case signals a pivotal shift toward privacy‑centric tax enforcement in an increasingly data‑driven fiscal landscape.