“EU member states cannot generally prohibit organisations’ legitimate and necessary but unauthorised processing of personal data where the information is not stored in specified public sources, the European Court of Justice (ECJ) has said.”
OUT-LAW.com, 28th November 2011
Source: www.out-law.com
