On 3 September 2026, the Court of Justice of the European Union (CJEU) delivered its judgment in Case C-798/24, Jautiva, addressing the balance between corporate transparency and data protection in relation to public access to shareholder information.
The CJEU held that EU company law does not require information concerning all shareholders, including minority shareholders, to be made publicly available and that the GDPR precludes unrestricted public access to shareholders’ personal data without appropriate safeguards.
In their latest article, our lawyers Kyriaki Stinga and Adonis Zachariou examine the Court’s reasoning, its relationship with the landmark Luxembourg Business Registers judgment and the potential relevance of Jautiva to the Cyprus corporate disclosure framework.









