Background
Grande Oriente d’Italia, an Italian Masonic association founded in 1805, sought protection after a parliamentary commission of inquiry ordered a search of its premises on 1 March 2017. The commission was investigating the infiltration of Freemasonry by mafia-type organized crime. During the search, police seized numerous documents, including lists containing the names and personal data of over 6,000 association members, along with computers, USB drives, and hard drives. The association’s Grand Master had previously refused to voluntarily provide member lists, citing his obligation to protect members’ privacy rights under Italian data protection law.
The search was authorized under Law no. 87 of 2013, which established the Parliamentary Commission of Inquiry on mafias and other criminal associations. The Commission’s investigation was grounded in evidence of mafia presence in Calabrian and Sicilian lodges and testimony from prosecutors describing ‘Ndrangheta’s infiltration of Freemasonry through a secret network called “La Santa.” The Commission concluded that obtaining member lists was essential to identify potential collusion between members and criminal organizations.
After the documents were copied and selected by the Commission in March 2017, with prosecutors and an IT expert present (but without the association’s participation), the seizure was lifted in April 2017 and materials returned to the association in May 2017. The association challenged the entire search and seizure order as violating Articles 8, 11, and 13 of the Convention.
The Court’s Holding
The Grand Chamber affirmed the Chamber’s finding of a violation of Article 8 of the Convention, concluding that Italy had failed to provide sufficient procedural safeguards against abuse and arbitrariness. While the Court acknowledged that the Commission had a legitimate aim—combating organized crime’s infiltration of civil society—it held that the means employed were not “necessary in a democratic society.”
The Court emphasized that although national authorities enjoy a wide margin of appreciation in organizing parliamentary inquiries, that margin narrows significantly when parliamentary bodies employ coercive procedural measures capable of directly affecting the Convention rights of third parties. Here, the search and seizure order was “particularly broad and devoid of any form of authorisation or scrutiny,” lacking either prior judicial authorization or subsequent impartial review. The Court identified critical deficiencies: the order contained no specific allegations of criminal conduct, the Commission’s discretion was essentially unlimited, and there was no clear temporal limit on storage of the seized sensitive personal data.
The Court held that the rule of law requires sufficient safeguards compatible with democratic principles, whether provided by a judicial authority or another impartial decision-making body mandated to perform either ex ante scrutiny or ex post review. Each member state has discretion in choosing which authority performs this review, but the safeguard itself is mandatory. Italy’s framework failed this test because the Commission could act without prior judicial authorization or subsequent review, and ordinary courts had no jurisdiction to review parliamentary commission decisions.
Key Takeaways
- Parliamentary commissions retain independence and a wide margin of appreciation in organizing their activities, but this margin contracts when they deploy coercive powers affecting Convention rights of non-state actors.
- Seizure of large volumes of sensitive personal data requires procedural safeguards—either ex ante judicial authorization or ex post review by an impartial authority—even when investigating serious crimes.
- Broad, unscrutinized search orders lacking specific factual allegations, temporal limits, and oversight mechanisms violate Article 8, regardless of the legitimacy of the underlying investigative goal.
- Member states may choose the reviewing authority (judicial or other impartial body), but some form of meaningful scrutiny is constitutionally mandatory.
Why It Matters
This judgment establishes important limits on how parliamentary bodies can conduct investigations involving sensitive personal data. While courts have traditionally given substantial deference to legislative inquiries on grounds of separation of powers, the Grand Chamber signals that rule-of-law protections—particularly procedural safeguards—apply even to parliamentary actors. The decision balances two compelling interests: the state’s legitimate need to investigate organized crime and corruption, and individuals’ fundamental right to privacy in association membership and personal data.
For practitioners, the ruling has immediate implications: member states must now structure parliamentary inquiry frameworks to include either judicial pre-authorization of coercive seizures of personal data, or post-seizure review by an impartial body, with clear duration limits on document retention. The decision also signals that breadth and vagueness in search orders—without tethering them to specific criminal allegations or regional/temporal limitations—will trigger heightened scrutiny. For organizations subject to parliamentary investigation, the judgment affirms a right to procedural fairness even when facing legitimate state investigative interests.