Yahoo
Jurisdiction: European Union · Italy · United Kingdom
Keywords: ESCC Newsroom, GDPR Article 3(2), right to erasure, reputational harm, data minimisation, cross‑border privacy, public interest expiry, institutional press releases
The article remains publicly accessible from Italy, where the data subject resides, despite formal requests for erasure and georestriction under GDPR and Italian privacy law.
Its continued availability engages cross‑border data protection obligations, reputational safeguards, and press responsibility standards.
ESCC did not meet the statutory deadline (12 September 2024) and failed to implement georestriction, breaching:
- storage limitation (Art. 5(1)(e) GDPR)
- data minimisation (Art. 5(1)(c) GDPR)
- proportionality requirements
This triggers Italian jurisdictional interests, including:
- Article 595 Penal Code (defamation)
- Law No. 47/1948 (press responsibility)
- ECHR Articles 8 and 10 (privacy vs. expression balancing)
- The LGO complaint (08/05/2022) preceded the Interview under Caution (30/06/2022).
- The CCRC (ref. 00071/2024) acknowledged procedural irregularities.
- Exculpatory documentation submitted in 2023 is not mentioned.
This contravenes:
- Article 5(1)(e) GDPR
- Article 6 GDPR
- ECJ Google Spain (C‑131/12)
📎 Former Yahoo link (now unavailable):
https://uk.style.yahoo.com/mans-letter-claiming-could-barely-113900741.html
- health‑related information (special category data, Art. 9 GDPR)
- a partial residential address (street without house number)
The article reverses this sequence, undermining procedural fairness.
The clinical record documents “constant burning pain ever since 2016”, a recognised pattern in degenerative lumbar conditions where baseline pain intensifies rapidly with walking or standing.
The applicant’s statement — “cannot walk more than 20 metres without pain” — is fully consistent with this medical evidence and was declared coherently in the application.
Portraying these statements as contradictory constitutes an aggravated distortion of clinical evidence, violating duties of accuracy, proportionality and contextual integrity required by institutional communication standards.
Such misrepresentation misleads the public, reinforces stigma, and undermines the subject’s right to fair representation.
- Full name → personal data (Art. 4 GDPR); publication acceptable only if proportionate.
- Age → identifying but non‑sensitive; acceptable if contextually relevant.
- Street address → localising personal data; street name should be removed, city only retained.
- Medical condition → special category data (Art. 9 GDPR); should be omitted or generalised.
- Medical letter details → sensitive and unnecessary; should not be published.
- Criminal conviction → judicial data (Art. 10 GDPR); publication subject to expiry and proportionality.
- Narrative tone → evaluative framing risks reputational profiling; must be neutralised.
The cumulative disclosure of these elements infringes minimisation, necessity, and proportionality principles under Article 5 GDPR.
- GDPR (Articles 3(2), 5, 6, 9, 17)
- Italian privacy law (Legislative Decree 196/2003)
- ECHR balancing (Articles 8 and 10)
- press responsibility standards
- proportionality and necessity principles
- Maintain a contestation‑proof archive.
- Pursue rectification, retraction, and georestriction.
- Request disclosure of editorial sources and internal documentation.
- Document timelines and legal citations for ICO and Italian authorities.
Citizens who have experienced similar exposure may recognise these patterns.
The Civic Observer hub provides replicable defence models and evidentiary clarity.